docs(openspec): add OpenSpec changes for FN-005, FN-006, FN-008, FN-009, FN-010

- Add frontend-foundation change (FN-005) with 46 tasks
- Add deployment-config change (FN-006) with 27 tasks
- Add runfusion-poc/opencode-poc change (FN-008) with 25 tasks
- Add config-secrets change (FN-009) with 31 tasks
- Add codeserver-spawn change (FN-010) with 38 tasks
- Include project specsheet and configuration
- Archive completed deployment-config change

openspec/changes/archive/2026-05-14-frontend-foundation/specs/route-guards/spec.md

@@ -0,0 +1,24 @@
+## ADDED Requirements
+
+### Requirement: Protected routes require authentication
+The system SHALL prevent unauthenticated users from accessing protected pages.
+
+#### Scenario: Unauthenticated access attempt
+- **WHEN** an unauthenticated user navigates to /projects
+- **THEN** the system redirects to /login
+- **AND** stores the intended destination for post-login redirect
+
+#### Scenario: Authenticated access
+- **WHEN** an authenticated user navigates to /projects
+- **THEN** the route renders normally
+
+### Requirement: Public routes are accessible
+The system SHALL allow unauthenticated access to public pages.
+
+#### Scenario: Login page
+- **WHEN** an unauthenticated user navigates to /login
+- **THEN** the login page renders without redirect
+
+#### Scenario: Health/status pages
+- **WHEN** any user navigates to /health
+- **THEN** the page renders without authentication