docs: close BUG-03/05, add Phase 27 features + renumber Android to Phase 28

readme.md

@@ -197,7 +197,7 @@ rm db/sql/quoije_Yaris2013.db
 
 The build is now at the endgame stage: the Pi app, remote server, and device-management/sync work
 are implemented and verified on the real Pi/unraid setup. The remaining roadmap phases are the
-road-test bug-fix pass (Phase 26) and the low-priority Android companion (Phase 27). The owner has
+road-test bug-fix pass (Phase 26), feature additions (Phase 27), and the low-priority Android companion (Phase 28). The owner has
 already completed the Phase 25 real-vehicle test; the bugs it surfaced are tracked in
 [BUGS.md](./BUGS.md).
 
@@ -216,7 +216,7 @@ already completed the Phase 25 real-vehicle test; the bugs it surfaced are track
   until a later portal-wide device selector/filter is added
 
 **Next**: Phase 26 — road-test bug fixes from the Phase 25 in-car test (see [BUGS.md](./BUGS.md)
-for the tracked issues). Phase 27 (Android companion app) follows after that.
+for the tracked issues). Phase 27 (feature additions from FEATURES.md) and Phase 28 (Android companion app) follow after that.
 
 Phase 14 is partially complete: the Pi's hardware watchdog is deployed and reboot-verified.
 Read-only-root storage hardening is deferred until persistent storage is moved off the SD root