docs: add FUTURE_WORK.md (deferred infra/SaaS/UX items); focus shifts to using the app as designed

docs/FUTURE_WORK.md

@@ -0,0 +1,30 @@
+# Future Work — Deferred (NOT doing now; focus is on using the app as designed)
+
+Created 2026-08-09. Product is being sold as SaaS, but the CURRENT focus is using the app
+as designed (the core idea). These are parked for later — do NOT implement unless explicitly
+asked. This file keeps them from being lost.
+
+## Product / SaaS launch (deferred — not needed to use the app)
+- [ ] **/legal page (real)** — ToS + Privacy Policy in Thai/EN. Current: Setup.vue links /legal
+      which is a stub (404). Add a real legal page + route + both locales before selling.
+- [ ] **Billing / payments** — org has plan(trial/paid/enterprise) but nothing charges.
+      Wire real payment gateway + plan upgrade flow when ready to sell.
+- [ ] **Separate storage volume per tenant** — data is org-keyed in one JSON store/volume;
+      for true isolation at scale, one volume per org (or move to a real DB).
+- [ ] **Persona "recipe" fully server-side** — client should never receive full latent recipe;
+      interim = strip in API (already done). Move internal modeling fully to server actions.
+- [ ] **Rate-limit export endpoint** (guarded by login already; add explicit limit).
+
+## UX / product polish (deferred)
+- [ ] Real mobile visual QA at 320px / 500px (needs a vision-capable model; current model
+      can't see screenshots, browser tooling blocked by camo proxy).
+- [ ] Legal/ToS wording + language toggle polish.
+- [ ] Super-admin "Super Admin" badge so the platform operator is visually distinct.
+
+## Ideas / backlog (captured, not decided)
+- Analytics CSV already exists; consider per-persona export or date-filtered export.
+- Onboarding tour for new admins.
+- Seat usage indicator (x / y seats used) in admin Users page.
+
+---
+Priority note: none of the above blocks using the app as designed. Core flow is complete.