docs(roadmap): check off webhooks + API key management (API access -> in progress)

Webhook events and per-license API key management shipped (commits 55c9893,
0effaaf, a1768bd). Moved 'API access and integrations' to in-progress with
per-item notes; key-authenticated external API access is the remaining piece.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

frontend/src/views/marketing/RoadmapView.vue

@@ -62,14 +62,14 @@ const groups: RoadmapGroup[] = [
     ],
   },
   {
-    status: 'planned',
+    status: 'in-progress',
     label: 'API access and integrations',
     description:
-      'Operator-grade API access so you can build your own tooling on top of the Corrosion control plane.',
+      'Operator-grade API access so you can build your own tooling on top of the Corrosion control plane. Webhooks and per-license API keys are live; key-authenticated external API access lands next.',
     items: [
-      { text: 'Public REST API for server management' },
-      { text: 'Webhook events (wipe completed, server down, player banned)' },
-      { text: 'API key management per license' },
+      { text: 'Public REST API for server management', note: 'REST API live with OpenAPI docs; key-authenticated external access in progress' },
+      { text: 'Webhook events (wipe completed, server down, player banned)', note: 'Shipped — HMAC-SHA256 signed delivery, SSRF-guarded' },
+      { text: 'API key management per license', note: 'Shipped — create, list, revoke with hashed storage' },
     ],
   },
   {