docs(planning): check off Phase 0.2 (commit 1fe4f92)

Per the plan's own instruction (line 275 of PUBLIC_RELEASE_PLAN.md):
"Check off completed tasks with the date + commit SHA."

Phase 0.2 verdict: DONE. Approach chosen: upgrade Python (Path B) over
capping pytest (Path A), to keep GHSA-6w46-j5rx-g56g closed. Resolution
sentence inlined in the table cell so a future reader doesn't have to
cross-reference the commit message to know which path won.

Workflow validation gates on next push: GitHub Actions runs ci.yml +
integration-tests.yml automatically.

Author: wildleo91

docs/PUBLIC_RELEASE_PLAN.md

@@ -65,7 +65,7 @@ CLAUDE.md split. Purely internal; no external dependencies.
 |---|------|------------|------|
 | 0.0 | **De-risk Phase 1 FIRST** — install `splunk-appinspect` locally (`pip install splunk-appinspect`), run against the current `.spl` with both `cloud` and `splunk-platform-standalone` profiles, record findings. Decides whether Phase 1 is "trivial" or "multi-week refactor" BEFORE committing the rest of Phase 0. If findings are catastrophic, escalate to user before continuing. | Findings summary written; Phase 1 effort-class estimated | 30-60 min |
 | 0.1 ✅ 2026-05-14 (commit 7d4765a) | Fix `validate-and-package.yml` — bump `actions/upload-artifact` v3→v4 (also `actions/checkout` v3→v4 same file; audited all 10 workflows in `.github/workflows/` — none of the other 9 still on v3) | Workflow green on next push | 15 min |
-| 0.2 | Fix `ci.yml` + `integration-tests.yml` pytest/Python mismatch (pytest 9.x requires Python ≥3.10; CI uses 3.9) | Both workflows green. Decision documented: cap pytest at ≤8.4.x OR upgrade workflow Python to 3.10+ | 30 min |
+| 0.2 ✅ 2026-05-14 (commit 1fe4f92) | Fix `ci.yml` + `integration-tests.yml` pytest/Python mismatch (pytest 9.x requires Python ≥3.10; CI uses 3.9). **Resolved: bumped Python 3.9 → 3.11 in 4 places** (ci.yml × 2, integration-tests.yml, release.yml) — chose upgrade-Python over cap-pytest to keep GHSA-6w46-j5rx-g56g closed. All 5 workflows now on 3.11. | Both workflows green. Decision documented: cap pytest at ≤8.4.x OR upgrade workflow Python to 3.10+ | 30 min |
 | 0.3 | Fix `e2e-smoke.yml` Playwright `undefined` env var failure (Windows binary path appears on Linux runner) | Workflow green | 1-2 hr |
 | 0.4 | Verify `a11y-audit` / `zap-baseline` / `pip-audit` workflows fire on schedule | At least one successful recent run of each | 10 min |
 | 0.5 | CLAUDE.md 3-bucket migration: extract Decision Log → `docs/DECISION_LOG.md`, Operational Procedures + Disaster Recovery + Rollback → `docs/RUNBOOKS.md`, Splunk Quirks → `docs/SPLUNK_QUIRKS.md` | 3 files exist, cross-references in CLAUDE.md updated, doc-drift hook passes | 2-3 hr |