docs(09): create phase plan — custom Docker image + portable setup script

Phase 9 splits into two independent Wave 1 plans:
- 09-01: Custom Hermes Docker image (ngn-agent:latest) with aws-cli,
  terraform, helm, kubectl, and datadog CLI (pup), version-pinned
- 09-02: Portable setup-ngn-agent.sh with argument parsing,
  prerequisite checks, interactive secret prompts, config generation,
  skill/script embedding, and cron registration

Also marks Phase 8 as complete (cron reporting shipped 2026-06-15).

.planning/STATE.md

@@ -3,15 +3,15 @@ gsd_state_version: 1.0
 milestone: v1.1
 milestone_name: Session Lifecycle, Memory & Reporting
 status: executing
-stopped_at: Phase 7 complete — session skill created
-last_updated: "2026-06-15T14:44:17.573Z"
+stopped_at: Phase 9 context gathered
+last_updated: "2026-06-15T15:03:12.180Z"
 last_activity: 2026-06-15 -- Phase 08 execution started
 progress:
   total_phases: 5
-  completed_phases: 3
+  completed_phases: 4
   total_plans: 5
-  completed_plans: 3
-  percent: 60
+  completed_plans: 5
+  percent: 80
 ---
 
 # Project State
@@ -70,7 +70,7 @@ None yet.
 
 ## Session Continuity
 
-Last session: 2026-06-15T12:28:17.967Z
-Stopped at: Phase 7 complete — session skill created
-Resume file: .planning/phases/07-main-session-skill/07-01-SUMMARY.md
+Last session: 2026-06-15T15:03:12.173Z
+Stopped at: Phase 9 context gathered
+Resume file: .planning/phases/09-tooling-portable-setup/09-CONTEXT.md
 Next action: /gsd-plan-phase 5 (Hindsight Memory Provider)