Prune shipped items from the roadmap and renumber what is left

.github/workflows/release.yml

@@ -219,8 +219,8 @@ jobs:
             it, and how to contribute
           - [Contributors](https://github.com/@REPO@/blob/@TAG@/contributors.md) — development,
             testing, CI, and release guidance
-          - [Roadmap](https://github.com/@REPO@/blob/@TAG@/docs/ROADMAP.md) — what shipped and
-            what is owed, item by item
+          - [Roadmap](https://github.com/@REPO@/blob/@TAG@/docs/ROADMAP.md) — what is still owed,
+            item by item
           NOTES
 
           # One substitution pass, so nothing in the body is ever shell-expanded. Links pin to the tag.

docs/wiki/Getting-Started-on-a-Raspberry-Pi.md

@@ -137,7 +137,7 @@ nothing for a player running as you.
   server sends. A repeat of the current value is skipped, but a slider drag is one rewrite
   per step; debouncing is a known gap, listed under
   [`docs/ROADMAP.md`](https://github.com/Sendspin/sendspin-cpp-cli/blob/main/docs/ROADMAP.md)
-  item 8. If that worries you, point the state at the runtime directory, which is already a
+  item 5. If that worries you, point the state at the runtime directory, which is already a
   tmpfs — and accept that the player's identity and pairings, volume, mute and the output
   delay are then forgotten across reboots. It has to be a **drop-in** rather than a config key, because the unit passes
   `--state-dir` itself and the command line wins (`sudo systemctl edit sendspin-cli`):

docs/wiki/Home.md

@@ -57,7 +57,7 @@ build time, so it turns an Intel Mac away rather than reporting success.
 inside an emulated Raspbian container rather than cross-compiled, because Debian and Ubuntu
 armhf are an ARMv7-A port. There is no Intel-Mac build; that one is recorded in
 [`docs/ROADMAP.md`](https://github.com/Sendspin/sendspin-cpp-cli/blob/main/docs/ROADMAP.md),
-item 12.
+item 10.
 Anything else builds from source.
 
 ## Where things live
@@ -66,7 +66,7 @@ Anything else builds from source.
   configuration, local control, services, troubleshooting, and
   [advanced usage](Advanced-Usage).
 - **[`docs/ROADMAP.md`](https://github.com/Sendspin/sendspin-cpp-cli/blob/main/docs/ROADMAP.md)**
-  is what is built, what is not, and what was actually tested rather than reasoned about.
+  is what is still owed, item by item.
 - **`sendspin-cli --help`** is the flag reference, and the config file's reference too:
   every config key is a long flag name minus its dashes.
 

docs/wiki/Installation.md

@@ -134,7 +134,7 @@ to check. Whether you notice depends entirely on the quarantine flag, which `tar
 xattr -d com.apple.quarantine ./sendspin-cli-0.1.0-macos-arm64/usr/local/bin/sendspin-cli
 ```
 
-A Developer ID signature and notarization are owed and tracked as roadmap item 10, so
+A Developer ID signature and notarization are owed and tracked as roadmap item 7, so
 `sudo installer` and the tarball are both affected until that lands.
 
 There is no launchd job in the payload. On macOS the player runs from a shell or under a

docs/wiki/Running-as-a-Service.md

@@ -179,7 +179,7 @@ Read the installed unit for the full block. Three operator-visible edges:
   `PrivateDevices=`, `DeviceAllow=`, `ProcSubset=pid` and `RestrictRealtime=` — because they
   pass every check a machine with no sound card can make, and tracked as
   [`docs/ROADMAP.md`](https://github.com/Sendspin/sendspin-cpp-cli/blob/main/docs/ROADMAP.md)
-  item 10.
+  item 8.
 
 Every directive the unit sets is listed above; `systemd-analyze security sendspin-cli`
 reports what your own systemd version makes of it.

scripts/build_macos_pkg.sh

@@ -99,7 +99,7 @@ sendspin-cli $VERSION ($ARCHITECTURES)
 This installer is NOT signed or notarized, and installing it does not make
 sendspin-cli pass Gatekeeper. The binary inside is ad-hoc signed, so it carries
 no developer identity for macOS to check. A Developer ID signature and
-notarization are still owed; see docs/ROADMAP.md item 10.
+notarization are still owed; see docs/ROADMAP.md item 7.
 
 Installs into /usr/local, which is the prefix the binary was built for: