docs(fastify-core): update migration progress log

docs/audits/FASTIFY_CORE_AUDIT_AND_ROADMAP_2026-03-06.md

@@ -1016,9 +1016,13 @@ The ecosystem finishes with fewer duplicate patterns and fewer partial migration
   - Scope: shared optional JWT context helper in `@bytelyst/fastify-core`, direct helper tests, `mcp-server` migrated off local `parseJwt`, obsolete local parser removed
   - Commit: `cfca118`
   - Status: Completed
-- [ ] **Increment 3 — Shared JWT helper migration in platform-service**
+- [x] **Increment 3 — Shared JWT helper migration in platform-service**
   - Scope: `platform-service` migrated from inline optional JWT parsing to `registerOptionalJwtContext`, bootstrap tests updated, shared-package and service validations passed
-  - Commit: `PENDING_COMMIT_SHA`
+  - Commit: `e4baa2f`
+  - Status: Completed
+- [ ] **Increment 4 — Product backend migration sweep (confirmed repos)**
+  - Scope: confirmed shared JWT helper migrations committed in product backends with isolated backend typechecks passing; verified commits so far: `learning_ai_clock` `8cc21d8`, `learning_ai_fastgap` `84b6da6`
+  - Commit: `PENDING_DOC_UPDATE_COMMIT_SHA`
   - Status: In progress
 
 ## P0 — Must Do
@@ -1029,6 +1033,10 @@ The ecosystem finishes with fewer duplicate patterns and fewer partial migration
 - [x] Create shared optional bearer JWT hook/helper
 - [ ] Migrate all product backends and `mcp-server` to the shared auth helper
 
+## Open TODOs / Questions
+
+- **TODO 1** — Reconcile repo-state inconsistency during product backend verification: `LysnrAI`, `MindLyst`, `JarvisJr`, and `PeakPulse` backend server files were validated with the shared helper shape, but only `ChronoMind` and `NomGap` showed commit-worthy diffs in git during this sweep. Confirm whether those other repos were already migrated previously or whether local workspace state masked pending diffs.
+
 ## P1 — Should Do
 
 - [x] Add `/ready` endpoint support