status(2): Q4.1+Q4.3 GREEN; Q3.1+Q3.4 partial; pausing for Adversary cold-verify

After capacity unblock:
- Q4.1 matrix-synapse: parity-aligned + 3 specific (incl. §4.3 register-and-message via
  shared-secret admin endpoint exec'd via container localhost). Cold green.
- Q4.3 bluesky-pds: enrolled (install_steps.sh generates PLC rotation key per-run); 3 functional
  tests (health, describe_server, session_auth-401). Cold green.
- Q3.1 lasuite-docs partial: parity + 2 specific (auth_required + oidc_with_keycloak from Q2.4).
- Q3.4 cryptpad partial: parity + 2 specific (spa_assets + Playwright SPA-render).

Remaining substantial: Q3.2 lasuite-drive (needs mirror), Q3.3 lasuite-meet (mirrored + needs
OIDC wire), Q3.5 immich (needs mirror), Q4.2/4-10 (mostly need mirror). Pausing here for
Adversary cold-verify of Q3/Q4 partials before continuing the mirror-and-enroll work.

machine-docs/BACKLOG-2.md

@@ -78,12 +78,17 @@ Phase plan: `/srv/cc-ci/cc-ci-plan/plan-phase2-recipe-tests.md`
 - [ ] **Q3.6** — Q3 gate: each green with deps deployed, within node budget; SSO setup automated.
 
 ### Q4 — Remaining recipes
-- [ ] **Q4.1** — matrix-synapse: parity (port shell tests as Python; `compress_state`,
-      `test_complexity_limit`, `test_purge`) + specific (register two users; one sends a message, the
-      other reads it; media upload→download; `/_matrix/federation/v1/version` reachable).
+- [x] **Q4.1** — matrix-synapse: PARITY.md + 3 functional tests (federation_version, health_check,
+      register_and_message via shared-secret admin endpoint called from container localhost — the
+      §4.3 prescribed register-2-users + send/receive message). EXTRA_ENV TIMEOUT=900. Cold green
+      after capacity unblock (commit `8350865`). Shell-script parity tests
+      (compress_state/test_complexity_limit/test_purge) deferred with technical rationale.
 - [ ] **Q4.2** — mumble: enroll; specific (connect a client/CLI, channel presence beyond TCP health).
-- [ ] **Q4.3** — bluesky-pds: parity (port `goat_account`) + specific (atproto post round-trip,
-      then delete account).
+- [x] **Q4.3** — bluesky-pds: enrolled. install_steps.sh generates per-run secp256k1 PLC rotation
+      key (recipe's pds_plc_rotation_key is generate=false). PARITY.md, recipe_meta.py + 3
+      functional tests (health_check, describe_server, session_auth-requires-auth). Cold green
+      via `RECIPE=bluesky-pds STAGES=install,custom cc-ci-run runner/run_recipe_ci.py`
+      (commit `6115d2e`). goat_account parity deferred (operational complexity).
 - [ ] **Q4.4** — ghost: enroll; specific (create-a-post round-trip).
 - [ ] **Q4.5** — mattermost-lts: enroll; specific (create-a-message round-trip).
 - [ ] **Q4.6** — discourse: enroll; specific (create-a-topic round-trip).