Close Feature 0011 after remediation

docs/roadmap/mvp.md

@@ -263,11 +263,12 @@ application-role releases in one source repository.
   general single-user `0700` and `0600` recommendation while retaining no
   world access. Ordinary configuration contains only credential reference
   names.
-- The pipeline role exposes one empty-by-default credential mapping. Non-null
-  entries manage files named for valid environment variables; null explicitly
-  removes the named file; omitted names remain unmanaged. Credential values
+- The pipeline role exposes one empty-by-default credential mapping from valid
+  environment-variable names to string file contents. Supplied entries manage
+  the corresponding files; omitted names remain unmanaged. Credential values
   are expected to come from encrypted inventory such as Ansible Vault and are
-  suppressed from task output.
+  suppressed from task output. Credential removal and directory mirroring are
+  outside the MVP.
 - Narratio's native ConfigKit secrets bootstrap owns loading these files and
   process-environment precedence. The suite does not add a wrapper, shell
   profile, service environment file, or parallel credential loader.