Bring TODO.md up to date with next and the tracker (closes #13)

The workflow lines now say who merges where: clawbot squash-merges
reviewed issue PRs into next, only sneak merges next into main, and a
deploy is a squash commit from main onto prod, never automatic.

Status lists what is on next today, each item linked to its issue: the
repo standards, interface detection on Linux and macOS, the macOS VPN
detection fix, the Starlink status lines, the version stamp, and CI
running script/cibuild. Next Step is the owner's merge of the milestone
PR and a first run on a real Mac.

Model: opus-5-5

TODO.md

@@ -20,20 +20,16 @@ Other issue branches do not touch this file; it changes only in its own PR to
 
 On `next`:
 
-- Repo standards (https://git.eeqj.de/sneak/rtnetmon/issues/1): `script/`
+- Repo standards (https://git.eeqj.de/sneak/rtnetmon/issues/1): the `script/`
-  entrypoints with the `Makefile` as thin shims, lint and tests run in Docker as
+  entrypoints, the vendored `.golangci.yml`, and `REPO_POLICIES.md`.
-  phases that gate the image build, the vendored `.golangci.yml`, and
-  `REPO_POLICIES.md`.
 - Interface detection on Linux and macOS
-  (https://git.eeqj.de/sneak/rtnetmon/issues/2): one pane or two, from the
+  (https://git.eeqj.de/sneak/rtnetmon/issues/2).
-  interfaces present. On macOS the VPN pane appears only while a VPN carries the
+- The fix for macOS VPN detection (https://git.eeqj.de/sneak/rtnetmon/issues/8).
-  default route (https://git.eeqj.de/sneak/rtnetmon/issues/8).
+- Starlink status lines (https://git.eeqj.de/sneak/rtnetmon/issues/3).
-- Starlink status lines under the physical interface's pane when a Starlink dish
-  answers (https://git.eeqj.de/sneak/rtnetmon/issues/3).
 - A version stamp: built with `make build` or a plain `docker build .`, the
   binary logs its git tag or short commit at startup
   (https://git.eeqj.de/sneak/rtnetmon/issues/10).
-- CI that runs `script/cibuild` on every push
+- CI that runs `script/cibuild` on every push to a branch
   (https://git.eeqj.de/sneak/rtnetmon/issues/12).
 
 # Next Step
@@ -41,6 +37,5 @@ On `next`:
 - `sneak` merges the milestone PR, https://git.eeqj.de/sneak/rtnetmon/pulls/6,
   carrying `next` into `main`.
 - A first run on a real Mac of what is on `next` now. The fix for
-  https://git.eeqj.de/sneak/rtnetmon/issues/8 has not run on a Mac, and none of
+  https://git.eeqj.de/sneak/rtnetmon/issues/8 has not run on a Mac yet;
-  the machines rtnetmon is developed and tested on is one, so that run is
+  `sneak`'s first run on his Mac is its test.
-  `sneak`'s.