fix: wire Phase 25.5a deploy docs and sync connectivity

- use app_network status for device sync connectivity checks
- mount migrate_phase25_5a.sql in server docker compose
- document manual server upgrade migration steps
- record verified Pi and unraid SSH access details in PLAN

Co-authored-by: Copilot <[email protected]>

PLAN.md

@@ -1526,6 +1526,10 @@ phase roadmap.
 - Server endpoints accessible via `/api/device-config`
 - Pi thread starts on boot (check logs for connectivity attempts)
 - Sync disabled if `YARIS_SERVER_URL` or `YARIS_DEVICE_KEY` not set
+- **2026-08-10 access verification**: SSH access confirmed to Pi at `[email protected]`
+  (new WiFi card/subnet) and to unraid via `ssh unraid` (`[email protected]`).
+  At verification time, Pi checkout was still on `d7b9bb6` and unraid server checkout on
+  `24a2323`, so both still need a deploy/pull to pick up the latest Phase 25.5a code.
 
 #### Next phase (Phase 25.5b)
 - Hot-reload handler to apply config changes without restart
@@ -1561,14 +1565,18 @@ phase. Scope, at a high level (not yet designed in detail):
 
 - **Pi credentials/SSH**: `ssh yaris@<pi-ip>`. Confirm current IP before connecting (varies by
   network — check locally, not recorded here) — usually reachable via `yaris.local` too (mDNS,
-  see Phase 6).
+  see Phase 6). **Current verified LAN IP (2026-08-10): `192.168.50.213`** after the TP-Link
+  Archer T3U WiFi change.
 - **Local dev repo**: work happens on a separate dev machine, not on the Pi. Push to
   `origin/shameless-aislop`, the repo's current default branch (repo is public).
 - **unraid server SSH**: `ssh [email protected]` (alias `unraid`). Real git checkout lives at
   `/mnt/user/app/git/yaris-obd` (not `/mnt/user/appdata/...`, which is only the docker-managed data
-  volume for the `db`/`dashcam` containers). Deploy with
+  volume for the `db`/`dashcam` containers). **Re-verified 2026-08-10**: alias works and lands in
+  `/root`. Deploy with
   `cd /mnt/user/app/git/yaris-obd && git pull --ff-only && cd server && docker compose up -d --build`.
-  Container names: `yaris-obd-db` (Postgres 17), `yaris-obd-api`.
+  Container names: `yaris-obd-db` (Postgres 17), `yaris-obd-api`. For existing databases, also run
+  the mounted migration scripts manually, e.g.
+  `docker compose exec db psql -U yarisobd -d yarisobd -f /docker-entrypoint-initdb.d/migrate_phase25_5a.sql`.
 - **Pi deploy loop**: `ssh yaris@<pi-ip>` (alias `yarisobd`) ->
   `cd ~/app/yaris-obd && git pull --ff-only` -> `sudo systemctl restart yaris-obd.service`
   (passwordless sudo confirmed via `yaris ALL=(ALL) NOPASSWD: ALL`). App stdout/stderr goes to