Enhance API with OIDC support, including login and callback endpoints. Update environment variables for OIDC configuration in .env.example. Add new features to the catalog service for listing software families, Minecraft versions, and deployment regions. Implement server management actions such as kill, delete, and update in the servers module. Integrate feature flags for maintenance mode in server operations. Update pnpm-lock.yaml with new dependencies and versions.

docs/IMPLEMENTATION_STATUS.md

@@ -1,8 +1,32 @@
 # HexaHost GameCloud — Implementation Status
 
-Last updated: 2026-06-26
+Last updated: 2026-07-05
 
-## Current phase: WHMCS hardening — mTLS + Product mappings ✅
+## Current phase: MVP complete — hardening & production readiness
+
+### Sprint 3 (2026-07-05)
+
+| Area | Status |
+|------|--------|
+| Members UI (server access tab) | Done |
+| Organizations / Support / Abuse APIs | Done |
+| Compliance export (S3) + account deletion | Done |
+| Cron-parser schedules (API + worker) | Done |
+| Global idempotency interceptor | Done |
+| Feature flag maintenance_mode | Done |
+| WHMCS PHP start/stop/restart/backup | Done |
+| Worker catalog-sync + notification dispatch | Done |
+| Gap-closure DB migration (40 tables) | Done |
+| E2E smoke tests extended | Done |
+
+### Next: Production hardening
+
+- Penetration test, integration API IP allowlist
+- Client-side backup encryption, Seccomp/AppArmor profiles
+- ClamAV upload scanning
+- Full E2E regression suite in CI
+
+## Previous phase: WHMCS hardening — mTLS + Product mappings ✅
 
 ### mTLS integration API