docs: revert BUG-01 — AP tested but phone-hotspot uplink not yet verified

PLAN.md

@@ -1860,10 +1860,8 @@ phase roadmap.
 
 ---
 
-### Phase 26: Road-test bug fixes — ✅ DONE (11 closed, 1 hardware)
-**Completed 2026-08-11.** All software bugs from the Phase 25 road test are fixed,
-deployed, and verified. Only BUG-02 (Pi micro-USB hardware) remains — owner's
-responsibility.
+### Phase 26: Road-test bug fixes — 🚧 IN PROGRESS (10 closed, 1 awaiting test, 1 hardware)
+**Last updated 2026-08-11.**
 
 **Closed (verified in prod):**
 - BUG-03: DTC/MIL persistence (`e2f2314`)
@@ -1893,10 +1891,9 @@ rather than incremental patching:
 - **Same JS file works on both Pi and server**: tile URL/attrib/zoom defaults read from
   `data-*` attributes on `#history-map`, with Pi-local fallbacks when absent.
 
-**Deployed and verified:**
-- BUG-01: Dual-radio — wlan0="yaris 911" at 10.42.0.1 (password "yaris911!"),
-  wlan1=uplink. Tested on iOS + Android, `yaris.local` resolves, AP stays up
-  with cell data active.
+**Awaiting owner test:**
+- BUG-01: Dual-radio — Pi AP tested (iOS + Android connect), phone-hotspot uplink
+  flow not yet verified. Settings page has in-car access card.
 - BUG-06: `_to_tz_aware()` in `app_upload.py` converts naive SQLite timestamps
   to TZ-aware before upload. One-time SQL migration on Unraid corrected all
   existing tracking_points (+4h EDT) and recomputed 43 trips.