docs(09-03): complete stealth UA pool and dedup plan

- Stealth UA pool (10 browsers) + RandomUserAgent/StealthHeaders
- Stable cross-source Dedup keyed by sha256(provider|masked|source)
- Mark RECON-INFRA-06 complete

.planning/STATE.md

@@ -3,14 +3,14 @@ gsd_state_version: 1.0
 milestone: v1.0
 milestone_name: milestone
 status: executing
-stopped_at: Completed 08-07-PLAN.md
-last_updated: "2026-04-05T21:32:47.810Z"
+stopped_at: Completed 09-03-PLAN.md
+last_updated: "2026-04-05T21:44:25.836Z"
 last_activity: 2026-04-05
 progress:
   total_phases: 18
-  completed_phases: 8
-  total_plans: 47
-  completed_plans: 47
+  completed_phases: 7
+  total_plans: 48
+  completed_plans: 48
   percent: 20
 ---
 
@@ -82,6 +82,7 @@ Progress: [██░░░░░░░░] 20%
 | Phase 08-dork-engine P02 | 12min | 2 tasks | 11 files |
 | Phase 08-dork-engine P03 | 10m | 2 tasks | 10 files |
 | Phase 08-dork-engine P07 | 3m | 1 tasks | 1 files |
+| Phase 09 P03 | 8min | 2 tasks | 4 files |
 
 ## Accumulated Context
 
@@ -115,6 +116,7 @@ Recent decisions affecting current work:
 - [Phase 06-output-reporting]: keys export rejects SARIF (scan-only); keys show always unmasked; keys verify updates findings inline via db.SQL().Exec
 - [Phase 08-dork-engine]: pkg/dorks mirrors pkg/providers go:embed pattern; //go:embed definitions/* tolerates empty .gitkeep-only tree
 - [Phase 08-dork-engine]: Runner + Executor interface separate from Registry so 08-05 GitHub executor registers without touching YAML loader
+- [Phase 09]: Plan 09-03: Dedup uses engine.Finding directly to avoid parallel-wave alias collision with Plan 09-01
 
 ### Pending Todos
 
@@ -129,6 +131,6 @@ None yet.
 
 ## Session Continuity
 
-Last session: 2026-04-05T21:25:47.469Z
-Stopped at: Completed 08-07-PLAN.md
+Last session: 2026-04-05T21:44:25.833Z
+Stopped at: Completed 09-03-PLAN.md
 Resume file: None