docs(24-02): complete public access client layer plan

- SUMMARY.md created for 24-02 (auth prompt modal, render-first root, public setup viewing)
- STATE.md updated: plan advanced, progress 100%, decisions recorded
- ROADMAP.md updated: phase 24 complete (2/2 plans with SUMMARYs)
- REQUIREMENTS.md: PUBL-01 through PUBL-05 marked complete

.planning/STATE.md

@@ -2,15 +2,15 @@
 gsd_state_version: 1.0
 milestone: v2.1
 milestone_name: Public Discovery
-status: executing
-stopped_at: Completed 24-01-PLAN.md
-last_updated: "2026-04-10T08:08:39.065Z"
+status: verifying
+stopped_at: Completed 24-02-PLAN.md
+last_updated: "2026-04-10T08:11:06.987Z"
 last_activity: 2026-04-10
 progress:
   total_phases: 6
-  completed_phases: 0
+  completed_phases: 1
   total_plans: 2
-  completed_plans: 1
+  completed_plans: 2
   percent: 0
 ---
 
@@ -27,7 +27,7 @@ See: .planning/PROJECT.md (updated 2026-04-09)
 
 Phase: 24 (public-access-infrastructure) — EXECUTING
 Plan: 2 of 2
-Status: Ready to execute
+Status: Phase complete — ready for verification
 Last activity: 2026-04-10
 
 Progress: [░░░░░░░░░░] 0%
@@ -62,6 +62,8 @@ v2.1 decisions:
 - Phase 999.3 (Public Access Auth Model backlog item) is now Phase 24 — PROMOTED
 - [Phase 24-public-access-infrastructure]: createRateLimit factory pattern for configurable rate limiting per endpoint tier
 - [Phase 24-public-access-infrastructure]: Browse tier 120/min, detail tier 60/min — same limits for auth and anon users
+- [Phase 24]: Both auth prompt CTAs go to /login — Logto handles sign-in and sign-up at the same OIDC endpoint
+- [Phase 24]: Soft navigate() replaces hard window.location.href for private route redirect — defers until auth resolves
 
 ### Pending Todos
 
@@ -73,6 +75,6 @@ None.
 
 ## Session Continuity
 
-Last session: 2026-04-10T08:08:39.063Z
-Stopped at: Completed 24-01-PLAN.md
+Last session: 2026-04-10T08:11:06.985Z
+Stopped at: Completed 24-02-PLAN.md
 Resume file: None