Replace the old pre-Mikado plan doc with a proper C2 Mikado chain:
root goal (harden-zot-registry) and three leaf prereqs
(register-zot-oidc-client, wire-ci-registry-auth, enforce-tag-immutability).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>