docs(18): create web dashboard phase plan

.planning/ROADMAP.md

@@ -358,14 +358,13 @@ Plans:
   3. The keys page lists all findings with masked values and a "Reveal Key" toggle that shows the full key on demand
   4. The recon page allows launching a recon sweep with source selection and shows live progress via Server-Sent Events
   5. The REST API at `/api/v1/*` accepts and returns JSON for all dashboard actions; optional basic auth or token auth is configurable via settings page
-**Plans**: 5 plans
+**Plans**: 3 plans
 
 Plans:
-- [ ] 17-01-PLAN.md — Bot package skeleton: telego dependency, Bot struct, long polling, auth middleware
-- [ ] 17-02-PLAN.md — Scheduler package + storage tables: gocron wrapper, subscribers/scheduled_jobs CRUD
-- [ ] 17-03-PLAN.md — Bot command handlers: /scan, /verify, /recon, /status, /stats, /providers, /help, /key
-- [ ] 17-04-PLAN.md — Subscribe/unsubscribe handlers + notification dispatcher (scheduler→bot bridge)
-- [ ] 17-05-PLAN.md — CLI wiring: cmd/serve.go + cmd/schedule.go replacing stubs
+- [ ] 18-01-PLAN.md — pkg/web foundation: chi router, go:embed static, layout template, overview page, auth middleware
+- [ ] 18-02-PLAN.md — REST API handlers (/api/v1/*) + SSE hub for live progress
+- [ ] 18-03-PLAN.md — HTML pages (keys, providers, scan, recon, dorks, settings) + cmd/serve.go wiring
+
 **UI hint**: yes
 
 ## Progress