- Add `make tunnel` to Makefile: reads first host from inventory/servers.yaml and opens a reverse SSH tunnel forwarding local state-hub (port 8000) to the remote host - Mark T02 done and close WP-0001 (all tasks complete) - WP-0002 T01/T02 task IDs backfilled by consistency checker Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>