docs(project): record cloud control plane maturity

docs/ROADMAP.md

@@ -83,8 +83,12 @@ execution across many devices.
 The packaging baseline is complete: `device-agent-runtime` remains the root uv
 workspace member, while the existing `cloud` modules and SDK are published by
 the one-way dependent `device-cloud-platform` member under
-`packages/cloud-platform`. A deployable control plane and Host Agent execution
-loop remain separate follow-up work.
+`packages/cloud-platform`. The deployable `apps/cloud-api` control plane and
+outbound `apps/device-host-agent` execution loop are implemented with scoped
+authentication, lease-backed scheduling, PostgreSQL/SQLite persistence,
+restart recovery, health checks, and public SDK status reporting. The supported
+deployment remains one scheduler-enabled control-plane process and provides
+at-least-once device-side-effect semantics.
 
 ## Long-Term Direction