chore: update backlog task statuses

- TASK-7 (auth): already done
- TASK-9 (canvas sync): in progress, blocked on rSpace shapes API
- TASK-10 (mobile responsive): done

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backlog/tasks/task-10 - Mobile-responsive-UI-polish.md

@@ -1,9 +1,10 @@
 ---
 id: TASK-10
 title: Mobile-responsive UI polish
-status: To Do
+status: Done
 assignee: []
 created_date: '2026-02-13 20:39'
+updated_date: '2026-02-13 21:41'
 labels: []
 dependencies: []
 priority: medium
@@ -14,3 +15,9 @@ priority: medium
 <!-- SECTION:DESCRIPTION:BEGIN -->
 Ensure all pages work well on mobile. Hamburger nav, touch-friendly editor toolbar, responsive note grid.
 <!-- SECTION:DESCRIPTION:END -->
+
+## Implementation Notes
+
+<!-- SECTION:NOTES:BEGIN -->
+Mobile responsive completed: responsive nav, grids, hero text, canvas overlay on mobile, icon-only buttons on small screens
+<!-- SECTION:NOTES:END -->

backlog/tasks/task-7 - EncryptID-auth-integration.md

@@ -1,9 +1,10 @@
 ---
 id: TASK-7
 title: EncryptID auth integration
-status: To Do
+status: Done
 assignee: []
 created_date: '2026-02-13 20:39'
+updated_date: '2026-02-13 21:20'
 labels: []
 dependencies: []
 priority: high
@@ -14,3 +15,19 @@ priority: high
 <!-- SECTION:DESCRIPTION:BEGIN -->
 Wire up EncryptID SDK for user authentication. JWT session management, user-scoped notes/notebooks. Currently the app has no auth - all data is shared.
 <!-- SECTION:DESCRIPTION:END -->
+
+## Implementation Notes
+
+<!-- SECTION:NOTES:BEGIN -->
+EncryptID auth integrated:
+- @encryptid/sdk installed as local file dep
+- Server auth: getAuthUser, requireAuth, getNotebookRole in src/lib/auth.ts
+- Client auth: authFetch wrapper with JWT token in src/lib/authFetch.ts
+- UI: AuthProvider, UserMenu, /auth/signin passkey page
+- All write routes protected (POST/PUT/DELETE require auth)
+- Read routes remain public
+- First-user auto-claims orphaned notebooks/notes
+- Ownership: notebook collaborator roles, note author verification
+- Build verified clean (Next.js 14.2.35)
+- Pushed to Gitea main branch
+<!-- SECTION:NOTES:END -->

backlog/tasks/task-9 - Canvas-sync-for-notes.md

@@ -1,9 +1,10 @@
 ---
 id: TASK-9
 title: Canvas sync for notes
-status: To Do
+status: In Progress
 assignee: []
 created_date: '2026-02-13 20:39'
+updated_date: '2026-02-13 21:41'
 labels: []
 dependencies: []
 priority: medium
@@ -14,3 +15,9 @@ priority: medium
 <!-- SECTION:DESCRIPTION:BEGIN -->
 Test and verify bidirectional canvas sync with rSpace: creating canvas from notebook, pinning notes to canvas, receiving shape updates.
 <!-- SECTION:DESCRIPTION:END -->
+
+## Implementation Notes
+
+<!-- SECTION:NOTES:BEGIN -->
+Canvas sync callback wired up (onShapeUpdate → /api/sync). BLOCKED: rSpace /api/communities/:slug/shapes endpoint does not exist yet — pushShapesToCanvas will 404. Inbound sync works via postMessage.
+<!-- SECTION:NOTES:END -->