Bring TODO.md up to date with next and the tracker (closes #13)

The workflow lines now say who merges where: clawbot squash-merges
reviewed issue PRs into next, only sneak merges next into main, and a
deploy is a squash commit from main onto prod, never automatic.

Status lists what is on next today: the repo standards, interface
detection on Linux and macOS with the macOS VPN pane shown only while a
VPN carries the default route, the Starlink status lines, the version
stamp, and CI running script/cibuild. Next Step is the owner's merge of
the milestone PR and a first run on a real Mac.

Model: opus-5-5

TODO.md

@@ -20,17 +20,20 @@ Other issue branches do not touch this file; it changes only in its own PR to
 
 On `next`:
 
-- Repo standards (https://git.eeqj.de/sneak/rtnetmon/issues/1): the `script/`
-  entrypoints, the vendored `.golangci.yml`, and `REPO_POLICIES.md`.
+- Repo standards (https://git.eeqj.de/sneak/rtnetmon/issues/1): `script/`
+  entrypoints with the `Makefile` as thin shims, lint and tests run in Docker as
+  phases that gate the image build, the vendored `.golangci.yml`, and
+  `REPO_POLICIES.md`.
 - Interface detection on Linux and macOS
-  (https://git.eeqj.de/sneak/rtnetmon/issues/2).
-- The fix for macOS VPN detection
-  (https://git.eeqj.de/sneak/rtnetmon/issues/8).
-- Starlink status lines (https://git.eeqj.de/sneak/rtnetmon/issues/3).
+  (https://git.eeqj.de/sneak/rtnetmon/issues/2): one pane or two, from the
+  interfaces present. On macOS the VPN pane appears only while a VPN carries the
+  default route (https://git.eeqj.de/sneak/rtnetmon/issues/8).
+- Starlink status lines under the physical interface's pane when a Starlink dish
+  answers (https://git.eeqj.de/sneak/rtnetmon/issues/3).
 - A version stamp: built with `make build` or a plain `docker build .`, the
   binary logs its git tag or short commit at startup
   (https://git.eeqj.de/sneak/rtnetmon/issues/10).
-- CI that runs `script/cibuild` on every push to a branch
+- CI that runs `script/cibuild` on every push
   (https://git.eeqj.de/sneak/rtnetmon/issues/12).
 
 # Next Step
@@ -38,5 +41,6 @@ On `next`:
 - `sneak` merges the milestone PR, https://git.eeqj.de/sneak/rtnetmon/pulls/6,
   carrying `next` into `main`.
 - A first run on a real Mac of what is on `next` now. The fix for
-  https://git.eeqj.de/sneak/rtnetmon/issues/8 has not run on a Mac yet;
-  `sneak`'s first run on his Mac is its test.
+  https://git.eeqj.de/sneak/rtnetmon/issues/8 has not run on a Mac, and none of
+  the machines rtnetmon is developed and tested on is one, so that run is
+  `sneak`'s.