Update the backlog to the state after the P0/P1 fixes

[milten89]

Brings docs/BACKLOG.md up to date after #12–#23. Every claim was checked against develop by the reviewer agent.

Changes

• P0: none open (unchanged).
• P1:
  • removes item 11: Rename colliding NBP rate types #22 fixed it, but the squash merge of Document NBP publication schedules in client XML docs #23 put the line back;
  • adds item 27: the gold price publication hour, left out of the Document NBP publication schedules in client XML docs #23 docs because it couldn't be confirmed from NBP's own text.
• P2:
  • item 12 (OpenUrzednik.Http): GetNbpAsync already has the ADR-0002 behaviour (Dispose HTTP request and response messages in GetNbpAsync #14, Map NBP error statuses to specific errors with the status code #16, Return network failures, timeouts and bad payloads as errors #18). What's left is the shared package and per-provider overrides.
  • item 13: mapping is shared since Return network failures, timeouts and bad payloads as errors #18 (NbpPayload.Map).
  • item 26 (new): WireMock error-path tests per client. Today they run only through the gold client; this belongs with item 12.
• P3:
  • item 20: no longer a vulnerability. NU1902 disappeared with SourceLink 10.0.401 (chore(deps): Bump the build-tooling group with 2 updates #12), but the package reference is still redundant.
  • item 21: notes what is documented and what isn't.
  • item 22: points to the prose skills from Add miodkuj and stop-slop skills for user-facing prose #24.
  • item 24 (new): move tests to Microsoft.Testing.Platform. This is what makes Dependabot chore(deps): Bump NSubstitute and WireMock.Net #11 fail on the .NET 10 SDK; the item lists global.json, the coverage collector and the required build (<tfm>) job names.
  • item 25 (new): docs/GITHUB-SETUP.md still says "Restrict updates: on", and the code_quality rule doesn't block merges.

Merge order: item 22 mentions /miodkuj and /stop-slop, so merge #24 first.

🤖 Generated with Claude Code