docs: CHANGELOG and TODOS reflect the held design-doc discovery conversion

CHANGELOG.md

@@ -21,7 +21,7 @@ We ran Anthropic's `/claude-api prompt-audit` (target `claude-opus-5-5`) over ev
 #### Fixed
 - Skill instructions that contradicted the code. Examples: the router's empty telemetry session ID; the design board flow that waited on a command that now exits; an unexpanded `$_DESIGN_DIR` in the reload call; wrong Pretext API signatures in /design-html; a /make-pdf flag that doesn't exist; /land-and-deploy falling back to bare `bun test` and reading only the legacy eval store; stale /ship step numbers; hardcoded `main`/`origin/main`; "Mac only" claims the installer contradicts; tab-state fields the terminal agent misnamed; spec flags that aren't flags; autoplan skipping renamed sections.
 - The shared test bootstrap undoes only the changes it made, instead of a blanket `git checkout`.
-- Skills that read or wrote a literal `~/.gstack` path now use your configured state root (`GSTACK_STATE_ROOT` / `GSTACK_HOME`): design-doc discovery, canary and health history, plan-tune gates and proposals, retro reads, ship ledgers, the telemetry sink and gbrain context queries. Custom state directories no longer miss data.
+- Skills that read or wrote a literal `~/.gstack` path now use your configured state root (`GSTACK_STATE_ROOT` / `GSTACK_HOME`): canary and health history, plan-tune gates and proposals, retro reads, ship ledgers, the telemetry sink and gbrain context queries. Custom state directories no longer miss data.
 - The browse untrusted-content warning names both marker formats the binary prints.
 - The "never ingest transcripts" choice is enforced in code, not just described.
 - /plan-tune describes the never-ask hook accurately.

TODOS.md

@@ -90,6 +90,14 @@ Each item was deferred with a reason during the `/claude-api prompt-audit` clean
 - **Per-repo transcript scope** — `recent`/`all` cover every project on the
   machine that repo policy allows. Add a way to restrict transcript ingest to
   chosen repos. Priority P3. Effort M.
+- **Design-doc discovery still reads `~/.gstack/projects`** — converting
+  `DESIGN_DOC_DISCOVERY` (and autoplan's Step 2 lookup) to `$GSTACK_STATE_ROOT`
+  made /plan-eng-review answer its no-target scope gate in prose instead of
+  AskUserQuestion: the plan-mode no-op eval failed 4 of 4 runs with the change
+  and passed 5 of 5 without it. Custom state roots miss office-hours design docs
+  until this lands. Find why the path change shifts the gate (likely the gate's
+  "do not probe for session state" rule), then convert and keep the eval green.
+  Priority P2. Effort S.
 - **Archaeology lint** — a free check that flags issue/PR numbers, plan IDs and
   incident stories in runtime skill prose (templates and resolver strings), so
   they stay in commit messages and CHANGELOG. Priority P3. Effort S.