- README: add real backend auth + session expiry to Implemented list,
  remove "Real backend auth" from Not Yet Implemented, update codebase
  stats (~75 src / ~23 test / ~149 methods), replace planned backend-auth
  link with design spec link
- architecture.md: add network/ package tree (HttpClientFactory, ApiResponse,
  NetworkError, SafeRequest), expand auth/ tree (AuthApi, AuthRepositoryImpl,
  TokenProvider, AuthEventBus, LogoutOrchestrator, dto/), add NetworkModule
  to DI table, update AuthModule description
- js-bridge-api.md: add requestLogout() command after setAgentStatus
- delete docs/planned/backend-auth.md — feature is now implemented

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>