docs: backfill task 1.9 commit SHA

.planning/ROADMAP.md

@@ -57,7 +57,7 @@ These rules govern every task. Any deviation must be discussed and documented as
 | 1.6  | [Login page](./phase-1-foundation/06-login-page.md)                                                          | 🟩     | `7215cb5` |
 | 1.7  | [Routing skeleton (TanStack Router + role-aware guards)](./phase-1-foundation/07-routing-skeleton.md)        | 🟩     | `f4a5e5b` |
 | 1.8  | [Logout flow](./phase-1-foundation/08-logout-flow.md)                                                        | 🟩     | `1ee339c` |
-| 1.9  | [Gitea CI + Dockerfile + nginx static serve](./phase-1-foundation/09-gitea-ci-and-dockerfile.md)             | 🟩     | `PENDING_SHA` |
+| 1.9  | [Gitea CI + Dockerfile + nginx static serve](./phase-1-foundation/09-gitea-ci-and-dockerfile.md)             | 🟩     | `9bd3b84` |
 | 1.10 | [Compose service block in trm/deploy](./phase-1-foundation/10-deploy-compose-block.md)                       | ⬜     | —         |
 
 ### Phase 2 — Live monitoring map

.planning/phase-1-foundation/09-gitea-ci-and-dockerfile.md

@@ -217,4 +217,4 @@ Four files landed, matching the conventions established by `trm/processor`:
 - Set `SPA_TAG=main` (or a SHA) and `SPA_CONFIG_FILE=...` in the deploy env.
 - Configure Traefik (or whichever proxy) to route the SPA's path on the public domain.
 
-Landed in `PENDING_SHA`.
+Landed in `9bd3b84`.