docs(design): correct P1/P2 status in admin dashboard partial doc

Two findings from claude review #675:

1. **P2 was marked ✅ shipped but #669 / #673 are still in flight.**
   PR description correctly noted slices 2a/2b haven't merged, but
   the table cell read "✅ shipped". Future readers reading the
   table alone would conclude main has the S3 write paths today,
   which is wrong. Fixed: P2 is now 🟡 partial with the in-flight
   PRs explicitly called out, mirroring the P4 row's shape.

2. **P1 row claimed criteria 1–6 but criterion 5 is in the
   outstanding items as deferred.** The two cells contradicted each
   other. Updated P1 to "criteria 1–4 + 6 (criterion 5 deferred —
   see outstanding items)" so the table is consistent with the
   outstanding-items section below.

The cosmetic notes (Last-updated field, verbose Status header) are
left for a future cleanup; they are not factually wrong, only
non-conforming to the README convention. Calling them out as a
follow-up rather than baking the precedent into this doc.

Author: bootjp

docs/design/2026_04_24_partial_admin_dashboard.md

@@ -9,8 +9,8 @@
 
 | Phase | Status | Landed via |
 |---|---|---|
-| **P1** — `internal/admin/` skeleton, auth, DynamoDB list/create/describe/delete, AdminForward (Section 3.3 acceptance criteria 1–6) | ✅ shipped | #634, #635, #644, #648 |
-| **P2** — S3 bucket list/create/delete/ACL, DescribeTable | ✅ shipped | #658 (read-only slice 1), #669 (write paths slice 2a), #673 (AdminForward integration slice 2b) |
+| **P1** — `internal/admin/` skeleton, auth, DynamoDB list/create/describe/delete, AdminForward (Section 3.3 acceptance criteria 1–4 + 6; criterion 5 deferred — see outstanding items) | ✅ shipped | #634, #635, #644, #648 |
+| **P2** — S3 bucket list/create/delete/ACL, DescribeTable | 🟡 partial — read-only slice 1 landed in #658; write paths (slice 2a, #669) and AdminForward integration (slice 2b, #673) are still in flight |
 | **P3** — React SPA + embed | ✅ shipped | #649, #650 |
 | **P4** — TLS, read-only role, CSRF, `docs/admin.md` | 🟡 mostly shipped — TLS / role / CSRF are live in P1, operator doc in #674 |