docs: changelog entry for Plan 1 completion

CHANGELOG.md

@@ -7,3 +7,14 @@ Format: [Keep a Changelog](https://keepachangelog.com).
 
 ### Added
 - Initial repo scaffolding
+
+### Added (Plan 1: Foundation)
+- LXC provisioning for `void2-db` (Postgres 16 + pgvector) and `void2-app`
+- Schema migrations 001-006 covering core, knowledge, resources, agents, cross-cutting, audit
+- Repos with capability-checked `actor` parameter and audit trail
+- Real audit log with redaction of sensitive keys (token, password, api_key, etc.)
+- `pending_changes` table for agent suggestions awaiting owner approval
+- Capability check module (allow / suggest / deny) for user vs agent actors
+- Owner-token bearer auth
+- Express server with `/health` and smoke `/api/spaces`
+- Test coverage: 72 tests across migrations, repos, capability, owner middleware, server