docs: Address Micropub design issues and clarify V1 scope

- Create ADR-029 for IndieAuth/Micropub integration strategy
- Address all critical issues from developer review:
  - Add missing 'me' parameter to token endpoint
  - Clarify PKCE as optional extension
  - Define token security migration strategy
  - Add authorization_codes table schema
  - Define property mapping rules
  - Clarify two authentication flows
- Simplify V1 scope per user decision:
  - Remove update/delete operations from V1
  - Focus on create-only functionality
  - Reduce timeline from 8-10 to 6-8 days
- Update project plan with post-V1 roadmap:
  - Phase 11: Update/delete operations (V1.1)
  - Phase 12: Media endpoint (V1.2)
  - Phase 13: Advanced IndieWeb features (V2.0)
  - Phase 14: Enhanced features (V2.0+)
- Create token security migration documentation
- Update ADR-028 for consistency with simplified scope

BREAKING CHANGE: Token migration will invalidate all existing tokens for security

CLAUDE.md

@@ -8,6 +8,19 @@ This file contains operational instructions for Claude agents working on this pr
 - All Python commands must be run with `uv run` prefix
 - Example: `uv run pytest`, `uv run flask run`
 
+## Agent-Architect Protocol
+
+When invoking the agent-architect, always remind it to:
+
+1. Review documentation in docs/ before working on the task it is given 
+   - docs/architecture, docs/decisions, docs/standards are of particular interest 
+
+2. Give it the map of the documentation folder as described in the "Understanding the docs/ Structure" section below
+
+3. Search for authoritative documentation for any web standard it is implementing on https://www.w3.org/
+
+4. If it is reviewing a developers implementation report and it is accepts the completed work it should go back and update the project plan to reflect the completed work
+
 ## Agent-Developer Protocol
 
 When invoking the agent-developer, always remind it to: