docs: plan HTTPS peers and source install

docs/README.md

@@ -27,6 +27,8 @@ disagree, update both in the same change or mark the discrepancy explicitly.
 | [private-workers.md](private-workers.md) | Customer worker isolation, credentials, onboarding | Partial |
 | [network-diagnostics.md](network-diagnostics.md) | Confirmation checks and dedicated diagnostic tasks | Partial |
 | [critical-check-cluster.md](critical-check-cluster.md) | Raft-backed dispatchless critical checks | Scaffold only |
+| [public-endpoint-and-identity.md](public-endpoint-and-identity.md) | One HTTPS origin, peer status, CA/mTLS, managed Raft topology | Planned; peer HTTPS partial |
+| [source-installation.md](source-installation.md) | Go SSH source installer and Docker/OpenSSH test matrix | Planned |
 | [implementation-roadmap.md](implementation-roadmap.md) | Ordered repository work packages and release gates | Active |
 | [source-plan-migration.md](source-plan-migration.md) | Source-to-target conversion ledger and resolved conflicts | Complete mapping |
 
@@ -39,7 +41,7 @@ This repository owns:
 - check and notification execution;
 - local web console, local state, inventory collection, and host metrics;
 - worker-to-worker transport and Raft state;
-- Docker, Compose, systemd, and release-image packaging.
+- Docker, Compose, systemd, source installation, and release-image packaging.
 
 The RSMon control-plane repository owns: