docs: create roadmap (10 phases)

Phases:
1. Foundation & Auth: AUTH-01, AUTH-02, AUTH-03
2. Social Platform Integration: AUTH-04
3. Onboarding & Context: ONBR-01, ONBR-02
4. AI Chat Interface: CHAT-01, CHAT-02, CHAT-03
5. Content Generation: CONT-01, CONT-02
6. Scheduling Foundation: SCHD-01, SCHD-02
7. Automation & Calendar: SCHD-03, SCHD-04
8. AI Learning: CHAT-04
9. Editorial Planning: CONT-03
10. Messaging Integration: MSGN-01, MSGN-02

All 19 v1 requirements mapped to phases.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.planning/STATE.md

@@ -0,0 +1,69 @@
+# Project State
+
+## Project Reference
+
+See: .planning/PROJECT.md (updated 2026-01-30)
+
+**Core value:** L'AI fa il lavoro sporco del social media manager — minimo sforzo, massima resa
+**Current focus:** Phase 1 - Foundation & Auth
+
+## Current Position
+
+Phase: 1 of 10 (Foundation & Auth)
+Plan: 0 of TBD (planning not started)
+Status: Ready to plan
+Last activity: 2026-01-31 — Roadmap created with 10 phases, 100% requirement coverage
+
+Progress: [░░░░░░░░░░] 0%
+
+## Performance Metrics
+
+**Velocity:**
+- Total plans completed: 0
+- Average duration: N/A
+- Total execution time: 0.0 hours
+
+**By Phase:**
+
+| Phase | Plans | Total | Avg/Plan |
+|-------|-------|-------|----------|
+| - | - | - | - |
+
+**Recent Trend:**
+- Last 5 plans: N/A
+- Trend: N/A
+
+*Updated after each plan completion*
+
+## Accumulated Context
+
+### Decisions
+
+Decisions are logged in PROJECT.md Key Decisions table.
+Recent decisions affecting current work:
+
+- Initial: Chat-first con schermate di supporto (L'interazione naturale riduce l'attrito)
+- Initial: Multi-model AI (Diversi utenti preferiscono modelli diversi, evita lock-in)
+- Initial: Onboarding progressivo (Evita abbandono per "troppo da fare" al primo accesso)
+- Initial: Automazione configurabile (Costruisce fiducia gradualmente, dall'approval all'autopilot)
+- Initial: Headless architecture (Prepara per app native senza riscrivere logica)
+
+### Pending Todos
+
+None yet.
+
+### Blockers/Concerns
+
+**Research-identified risks to address early:**
+- Phase 1: Implement RLS multi-tenant isolation from day 1 (no retrofitting)
+- Phase 2: Facebook API rate limits (200 DM/hour) — need exponential backoff + monitoring
+- Phase 5: AI cost management — implement caching, freemium limits, per-user tracking
+- Phase 6: Job queue reliability critical — BullMQ on Redis, not setTimeout
+- Phase 10: WhatsApp Business verification takes 2-4 weeks — start process early
+
+## Session Continuity
+
+Last session: 2026-01-31
+Stopped at: Roadmap and STATE.md created, traceability updated
+Resume file: None
+Next step: Execute `/gsd:plan-phase 1` to create detailed plans for Foundation & Auth