docs: track tooling DX and lethe-oidc-stub follow-up (#10)

- TODO.md: mark task #5 (lethe-web-ui-aggregates) Reviewed; add task
  #10 lethe-oidc-stub (promote the in-test oidcTestServer to an
  exported testutil package, optionally a cmd/oidc-stub binary, to
  unblock real-browser smoke without standing up Authelia locally).
  New sections: Repo hygiene / Tooling DX (with the four tooling items
  now landed) and Deferred operational follow-ups (sourcecraft push +
  browser smoke for #5).
- tasks/lethe-web-ui-aggregates.md: cross-ref the deferred browser
  smoke to task #10 in Future work.

docs(lethe-web-ui-aggregates): record execute, verify, review

Mark task Reviewed. Conclusion captures the eight active
deviations, the four Important review findings (all
resolved in 3fbbfc8 and 1818fac), the verify checklist
(positive / negative / invariant / interface checks all
passing), and the deferred items needing user smoke
through the new SPA routes in a real browser.

docs(lethe-web-ui-aggregates): add implementation plan

docs: add roadmap TODO and lethe-web-ui-aggregates design

TODO.md indexes all 9 task specs (4 done/in-progress, 5 deferred or
blocked) plus the carry-overs from the foundation Conclusion. New task
file lethe-web-ui-aggregates covers the backend /projects + /stats
endpoints and the three frontend screens (Projects index, Project
detail, Stats), replacing three of the foundation's stub routes.