docs(#20): indeedhub phase 3 adoption path live-verified on .228

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs/PRODUCTION-MASTER-PLAN.md

@@ -150,8 +150,19 @@ phases 2–6 (`dual-ecash-design.md`).
 ## 8b. SESSION STATE + RESUME (2026-06-21, live)
 
 **Landed + committed on main this session (newest first):**
-- `b1eea8c0` indeedhub (#20) **phase 3 — CODE COMPLETE, unit-tested; NOT yet
-  live-verified.** 7 manifests (apps/indeedhub-{postgres,redis,minio,relay,api,
+- **#20 phase 3 — ADOPTION PATH LIVE-VERIFIED on .228 (2026-06-21).** Built
+  v1.7.99-alpha, sideloaded binary + 7 manifests, restarted (stop/replace/start —
+  containers survived via --restart unless-stopped + podman-restart.service). RPC
+  `package.install indeedhub` → `complete`, orchestrator-first path adopted all 7
+  members (`reconcile action app_id=indeedhub-* action=NoOp`), containers stayed
+  **Up 4 days (NOT recreated)** — zero data/credential disruption. UI green:
+  frontend :7778 → 200, nostr-provider.js → 200, **/api/ → 200 (proves
+  network_aliases: frontend nginx `http://api:4000` resolved on indeedhub-net)**.
+  Fleet healthy (36 containers, none down). **STILL TODO: fresh-create path** —
+  adoption is NoOp so install_fresh (→ post_install hook + alias rendering on a NEW
+  container) was NOT exercised live; validate via destructive lifecycle
+  (uninstall→reinstall or recreate one member) on .228, then .198, then the gate.
+- `b1eea8c0` indeedhub (#20) **phase 3 — CODE COMPLETE, unit-tested.** 7 manifests (apps/indeedhub-{postgres,redis,minio,relay,api,
   ffmpeg} + apps/indeedhub frontend) + install_indeedhub_stack orchestrator-first
   (immich pattern). Data-preserving by construction = ADOPTION on .228: exact live
   hyphen container names, named volumes indeedhub-*-data, dedicated indeedhub-net +