Delivered: Self-service password recovery, per-card count-only refresh, and a configurable graceful-shutdown drain timeout.
Key accomplishments:
- Track A: HTTP password recovery — single-use 15-min token (log + 0600 file, never in any response), session-secret rotation + auto-login, rate-limited, /reset auth-exempt via a tight exact-or-/reset/ predicate (RCOV-01..06).
- Track B: per-card 'Refresh counts' button + POST /api/refresh-counts that updates counts/health without launching a search or advancing the cursor (CNT-01..05).
- Track C: shutdown_drain_timeout config field + settings input (>=1.0, finite-only) with documented env-override precedence, read at shutdown time (CFG-03/CFG-04); deferred-record correction (DOCS-01).
4 phases (72-75), 11 plans. 1067 tests passing, ruff clean. Deep-review APPROVED; milestone audit passed (14/14 reqs, 11/11 cross-phase connections wired); live NAS walkthrough exercised all three tracks with 0 bugs.
See .planning/MILESTONES.md for full details.