b98752b3eb
deployment.md §6 updated: - Moved CRL from "remaining" to "resolved" (now in-band via signed control-envelope with magic prefix). - Added bullets for the new v2 features: port-knocking + cover traffic (anti-surveillance), `aura server-init` / `aura provision-client` (automation), `no_logs` field redaction, `bridges` list. - Remaining honest limits trimmed to genuine v3 work: native Go phone client (sing-box, explicitly excluded by user) and multi-hop routing. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>