chore(orchestrator): bootstrap MS20 Site Stabilization mission (#535)

Co-authored-by: Jason Woltje <jason@diversecanvas.com>
Co-committed-by: Jason Woltje <jason@diversecanvas.com>

docs/scratchpads/ms20-site-stabilization-20260227.md

@@ -0,0 +1,67 @@
+# Mission Scratchpad — MS20 Site Stabilization
+
+> Append-only log. NEVER delete entries. NEVER overwrite sections.
+> This is the orchestrator's working memory across sessions.
+
+## Original Mission Prompt
+
+```
+User tested every aspect of mosaic.woltje.com and found:
+
+settings/personalities:
+- Unable to save new personality
+- Dark mode theming on Formality Level dropdown not correct
+- Error: Cannot GET /api/personalities?isActive=true
+
+settings/credentials:
+- "Loading credentials" displayed, none populated, unable to add
+- favicon.ico 404
+- useWorkspaceId warning in console
+
+settings/domains:
+- Workspace ID is required error
+
+projects:
+- Unable to create new project
+- Workspace ID is required error
+
+Additional:
+- Fix Orchestrator 502
+- Fix Orchestrator WebSocket connection
+- /users/me/preferences endpoint needs implemented
+- #terminal anchor panel toggle needs page route
+```
+
+## Planning Decisions
+
+### S1 — 2026-02-27
+
+1. **Mission scope**: Stabilization mission covering runtime bugs and feature gaps from live testing. NOT the originally planned MS20-MultiTenant. Bumped MultiTenant to MS21.
+
+2. **Task categorization**:
+   - P1 (Critical — blocking core functionality): Workspace context for mutations, orchestrator 502
+   - P2 (High — important features): Personalities API, preferences endpoint, credentials UI, terminal route
+   - P3 (Medium — polish): Dark mode dropdown, favicon, workspace ID warning
+
+3. **PRD updated**: Added FR-020 (Site Stabilization) with 6 new assumptions. Shifted MS20-MultiTenant to MS21, renumbered subsequent milestones.
+
+4. **Prior fixes already merged**:
+   - PR #531: RLS context SQL, workspace guard crash, projects response unwrapping
+   - PR #532: Widget endpoints workspace context + auto-detect workspace ID + credentials pages
+   - PR #533: Knowledge entry query DTO — sortBy, sortOrder, search, visibility
+
+## Session Log
+
+| Session | Date       | Milestone | Tasks Done | Outcome     |
+| ------- | ---------- | --------- | ---------- | ----------- |
+| S1      | 2026-02-27 | MS20      | Planning   | In progress |
+
+## Open Questions
+
+- Orchestrator 502: Is the orchestrator container actually running? Need to check Docker service status.
+- Workspace ID lifecycle: When does the workspace ID first get set in localStorage? Is it during login/auth callback?
+- Credentials backend: Do the M7 credential CRUD endpoints still work, or has something changed since?
+
+## Corrections
+
+<!-- Record any corrections to earlier decisions or assumptions. -->