docs(16-02): complete APKMirror, crt.sh, SecurityTrails plan

- SUMMARY.md with implementation details and verification results
- STATE.md updated with progress and decisions
- REQUIREMENTS.md marks RECON-MOBILE-01, RECON-DNS-01, RECON-DNS-02 complete

.planning/STATE.md

@@ -3,14 +3,14 @@ gsd_state_version: 1.0
 milestone: v1.0
 milestone_name: milestone
 status: executing
-stopped_at: Completed 15-03-PLAN.md
-last_updated: "2026-04-06T13:37:48.053Z"
+stopped_at: Completed 16-02-PLAN.md
+last_updated: "2026-04-06T13:46:47.368Z"
 last_activity: 2026-04-06
 progress:
   total_phases: 18
   completed_phases: 14
   total_plans: 81
-  completed_plans: 80
+  completed_plans: 81
   percent: 20
 ---
 
@@ -99,6 +99,7 @@ Progress: [██░░░░░░░░] 20%
 | Phase 14 P01 | 4min | 1 tasks | 14 files |
 | Phase 15 P01 | 3min | 2 tasks | 13 files |
 | Phase 15 P03 | 4min | 2 tasks | 11 files |
+| Phase 16 P02 | 3min | 2 tasks | 8 files |
 
 ## Accumulated Context
 
@@ -148,6 +149,7 @@ Recent decisions affecting current work:
 - [Phase 14]: RegisterAll extended to 45 sources (40 Phase 10-13 + 5 Phase 14 CI/CD); CircleCI gets dedicated CIRCLECI_TOKEN
 - [Phase 15]: Discord/Slack use dorking approach (configurable search endpoint) since neither has public message search API
 - [Phase 15]: Log aggregator sources are credentialless, targeting exposed instances
+- [Phase 16]: APKMirror metadata-only (no APK decompilation); CrtSh+SecurityTrails share configProbeEndpoints; SecurityTrails gets SECURITYTRAILS_API_KEY
 
 ### Pending Todos
 
@@ -162,6 +164,6 @@ None yet.
 
 ## Session Continuity
 
-Last session: 2026-04-06T13:32:52.610Z
-Stopped at: Completed 15-03-PLAN.md
+Last session: 2026-04-06T13:46:47.365Z
+Stopped at: Completed 16-02-PLAN.md
 Resume file: None