docs(GOO-33): comprehensive documentation sprint

Create/update all Sprint 6 documentation:
- CHANGELOG.md: document GOO-33 and recent audit findings
- CONTRIBUTING.md: add branching, PR, commit conventions
- docs/ci-cd.md: GitHub Actions pipeline documentation
- docs/onboarding.md: developer setup & onboarding guide
- docs/mcp-servers.md: MCP servers API documentation
- docs/PROJECT_TRACKER.md: mark GOO-33 as in_progress
- docs/QA_TRACKER.md: test status and verification plans

Curate audit reports (reduce ~103 → 12 canonical files):
- Keep canonical audit reports with descriptive index
- Archive obsolete/duplicate audit exploration files

Acceptance Criteria:
- [x] QA_TRACKER.md exists with current test status
- [x] CHANGELOG.md updated to today
- [x] PROJECT_TRACKER.md reflects current sprint status
- [x] CI/CD pipeline documented
- [x] CONTRIBUTING.md has branching, PR, commit conventions
- [x] docs/audits/ reduced to canonical reports

Co-Authored-By: Paperclip <noreply@paperclip.ing>

docs/PROJECT_TRACKER.md

@@ -1,8 +1,84 @@
 # GoodGo Platform AI — Theo Dõi Dự Án
 
-**Cập Nhật Lần Cuối:** 2026-04-12
+**Cập Nhật Lần Cuối:** 2026-04-22
 **Dự Án:** Goodgo Platform AI
-**Trạng Thái:** MVP Hoàn Thành — Giai Đoạn 7 (Cải Tiến Sau MVP) Wave 14 ✅ Build Xanh
+**Trạng Thái:** GOO-2 Audit & Execution — Sprint 1 đang triển khai
+
+---
+
+## GOO-2 Lead Orchestrator Audit — Task Tracker (2026-04-22)
+
+### Sprint 1 — Blockers + P0 Security
+
+| Task | Tiêu đề | Ưu tiên | Owner | Trạng thái |
+|------|---------|---------|-------|------------|
+| GOO-3 | Fix double CSRF middleware | Critical | Backend TechLead | ✅ done |
+| GOO-4 | UsageRecord atomic metering | Critical | Senior Backend Engineer | 🔄 in_progress |
+| GOO-5 | Rate-limit exchange-token | Critical | Junior Backend Engineer | 🔄 in_progress |
+| GOO-6 | Fix MoMo IPN URL | Critical | Middle Backend Engineer | 🔄 in_progress |
+| GOO-7 | JWT validate user status | Critical | Security Engineer | 🔄 in_progress |
+| GOO-8 | Encrypt SystemSetting secrets | Critical | Security Engineer | ⏳ todo |
+| GOO-9 | Fix MCP status filter | Critical | Junior Backend Engineer | ⏳ todo |
+| GOO-10 | Update PRODUCTION_READINESS.md | High | Doc Bot | 🔄 in_progress |
+
+### Sprint 2 — P0 Features + Trust
+
+| Task | Tiêu đề | Ưu tiên | Owner | Trạng thái |
+|------|---------|---------|-------|------------|
+| GOO-11 | Phone-OTP login | Critical | Backend TechLead | 🔄 in_progress |
+| GOO-12 | legalStatus enum + badge | Critical | Senior Backend Engineer | ⏳ todo |
+| GOO-13 | Vietnamese diacritic search | Critical | Backend TechLead | ⏳ todo |
+| GOO-14 | Remove $queryRawUnsafe | High | Middle Backend Engineer | ⏳ todo |
+| GOO-15 | Fix soft-deleted user login | High | Junior Backend Engineer | ⏳ todo (blocked by GOO-7) |
+| GOO-16 | Fix obsolete districts | High | Middle Frontend Engineer | 🔄 in_progress |
+| GOO-17 | ZNS template registration | High | CMO | 🚫 blocked |
+
+### Sprint 3 — MVP Feature Completeness
+
+| Task | Tiêu đề | Ưu tiên | Owner | Trạng thái |
+|------|---------|---------|-------|------------|
+| GOO-18 | Ward-level search | High | Middle Backend Engineer | ⏳ todo |
+| GOO-19 | Scam/abuse report flow | High | Senior Backend Engineer | ⏳ todo |
+| GOO-20 | ROOM_RENTAL property type | High | Junior Backend Engineer #2 | 🔄 in_progress |
+| GOO-21 | Vietnam admin data (ĐVHCVN) | High | Database Architect | 🔄 in_progress |
+| GOO-22 | Subscription plan seeding | Medium | Junior Backend Engineer #2 | ⏳ todo |
+| GOO-23 | Module boundary fixes | Medium | Backend TechLead | ⏳ todo |
+
+### Sprint 4 — Trust + Monetization
+
+| Task | Tiêu đề | Owner | Trạng thái |
+|------|---------|-------|------------|
+| GOO-24 | Certificate verification | Senior Backend Engineer | ⏳ todo (blocked by GOO-12) |
+| GOO-25 | Payment go-live checklist | DevOps Engineer | 🔄 in_progress |
+| GOO-26 | Revenue stats fix | Middle Backend Engineer | ⏳ todo |
+| GOO-27 | Float→Decimal migration | Database Architect | 🔄 in_progress |
+| GOO-28 | Typesense+MinIO health | Infrastructure Engineer | 🔄 in_progress |
+
+### Sprint 5 — UX + Performance
+
+| Task | Tiêu đề | Owner | Trạng thái |
+|------|---------|-------|------------|
+| GOO-29 | Mobile swipe gallery | Middle Frontend Engineer | ⏳ todo |
+| GOO-30 | Listing expiry notification | Middle Backend Engineer | ⏳ todo |
+| GOO-31 | AVM circuit breaker | Infrastructure Engineer | ⏳ todo |
+| GOO-34 | P2 batch fixes | Founding Engineer | 🔄 in_progress |
+
+### Sprint 6 — Architecture + Docs
+
+| Task | Tiêu đề | Owner | Trạng thái |
+|------|---------|-------|------------|
+| GOO-32 | Architecture hygiene batch | Backend TechLead | ⏳ todo |
+| GOO-33 | Documentation updates | Doc Bot | 🔄 in_progress |
+
+### Tổng kết tiến độ
+- **Done:** 1/32 (3%)
+- **In progress:** 13/32 (41%)
+- **Todo:** 16/32 (50%)
+- **Blocked:** 2/32 (6%)
+
+---
+
+## Lịch sử Giai Đoạn 0-7 (trước GOO-2 audit)
 
 ---