docs: cross-validate all documentation against codebase, fix 21 inaccuracies

Fact-checked every doc file against actual source code. Key corrections:
- Table count 14→17 (added profiles, agent_groups, agent_group_members)
- Endpoint count 55→68 (counted from router.go)
- Test count 250+→330+ (99 service + 165 handler + 53 frontend + connectors)
- Dashboard views 14→16 pages (counted from web/src/pages/)
- step-ca marked implemented (was "Planned V2") across all docs
- ACME DNS-01 marked implemented (was "planned") in concepts.md
- Removed ADCS as separate planned connector (handled via sub-CA mode)
- Fixed pointer types in connectors.md interface docs (*string, *time.Time)
- Added 3 missing tables to architecture.md ER diagram
- Added 5 missing env vars to README config table
- Updated M11/M12 to ✅ in README roadmap
- Issuer count in quickstart demo data 3→4 (added step-ca)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docs/connectors.md

@@ -58,23 +58,23 @@ type RenewalRequest struct {
     CommonName string
     SANs       []string
     CSRPEM     string
-    OrderID    string // optional, for tracking
+    OrderID    *string // optional, for tracking (pointer — nil when not provided)
 }
 
 type RevocationRequest struct {
     Serial string
-    Reason string // optional
+    Reason *string // optional (pointer — nil when not provided)
 }
 
 type OrderStatus struct {
     OrderID   string
-    Status    string // "pending", "valid", "invalid", "expired"
-    Message   string
-    CertPEM   string
-    ChainPEM  string
-    Serial    string
-    NotBefore time.Time
-    NotAfter  time.Time
+    Status    string     // "pending", "valid", "invalid", "expired"
+    Message   *string    // optional (pointer fields are omitted from JSON when nil)
+    CertPEM   *string    // populated when order is complete
+    ChainPEM  *string    // populated when order is complete
+    Serial    *string    // populated when order is complete
+    NotBefore *time.Time // populated when order is complete
+    NotAfter  *time.Time // populated when order is complete
     UpdatedAt time.Time
 }
 ```