plan: phases dstamp, mailu, kuma, drone (queued after bsky) + journal

- dstamp: attribute + fix the discourse abra-stamp drift (env change 06-05→
  06-10, harness-neutral, currently pinning discourse at L1); blast-radius
  sweep; HC1 keeps its teeth
- mailu: backupbot v2 labels recipe PR, restore proven on real seeded mail,
  backup rung earned instead of skipped (operator approved re-entry)
- kuma: uptime-kuma first-run wizard + create-a-monitor functional test
  (Socket.IO or Playwright, real probe evidence, flake-checked)
- drone: gitea-dep enrollment, maximal subset per Phase-2 scoping;
  P0 /etc/timezone host deploy is orchestrator-owned (3bde76f committed)

cc-ci-plan/JOURNAL.md

@@ -446,3 +446,15 @@ session cc-ci-orchestrator-stale can be killed; recipe-mirrors org still private
   in rcust M2; DEFERRED carries the re-pin follow-up. Deliverable = green recipe-mirror
   PR (operator merges) + verified screenshot on the PR runs; DEFERRED entries closed.
 - .phases-spec now rcust;shot;lvl5;bsky (idx still lvl5); watchdog bounce to load.
+
+## 2026-06-11 ~12:05 — four more phases queued + DEFERRED housekeeping (operator)
+- Queue now: bsky (in progress, idx 3) → dstamp (discourse abra-stamp drift dig) →
+  mailu (backupbot labels recipe PR) → kuma (uptime-kuma create-a-monitor test) →
+  drone (gitea-dep enrollment; P0 host /etc/timezone deploy is MINE — nixos-rebuild
+  switch on cc-ci host with committed 3bde76f, do it before/when phase drone starts or
+  when STATUS-drone flags BLOCKED).
+- DEFERRED.md housekept (cc-ci 823023a): closed plausible-enrollment, discourse-bitnami,
+  immich-pgdump (PR#2 merge-pending), plausible-Q4.7b (PR#3 merge-pending); re-entered
+  mailu/drone/kuma/dstamp/bsky with plan pointers. Operator confirmed immich PR#2 +
+  plausible PR#3 are good — merges pending on operator.
+- ORCHESTRATOR ACTION ITEM: deploy /etc/timezone host fix for phase drone P0.