Bring TODO.md up to date with next and the tracker (closes #13)

The workflow lines now say who merges where: clawbot squash-merges
reviewed issue PRs into next, only sneak merges next into main, and a
deploy is a squash commit from main onto prod, never automatic.

Status lists what is on next today, each item linked to its issue: the
repo standards, interface detection on Linux and macOS, the macOS VPN
detection fix, the Starlink status lines, the version stamp, and CI
running script/cibuild. Next Step is the owner's merge of the milestone
PR and a first run on a real Mac.

Model: opus-5-5

TODO.md

@@ -24,7 +24,8 @@ On `next`:
   entrypoints, the vendored `.golangci.yml`, and `REPO_POLICIES.md`.
 - Interface detection on Linux and macOS
   (https://git.eeqj.de/sneak/rtnetmon/issues/2).
-- The fix for macOS VPN detection (https://git.eeqj.de/sneak/rtnetmon/issues/8).
+- The fix for macOS VPN detection
+  (https://git.eeqj.de/sneak/rtnetmon/issues/8).
 - Starlink status lines (https://git.eeqj.de/sneak/rtnetmon/issues/3).
 - A version stamp: built with `make build` or a plain `docker build .`, the
   binary logs its git tag or short commit at startup