docs: phase 3b.1 manual-sessions session log + roadmap note

docs/roadmap.md

@@ -180,10 +180,16 @@ Each phase keeps the system working and is its own spec → plan → build cycle
   **3a implemented** (`apps/admin`; plan `docs/superpowers/plans/2026-06-17-phase-3a-admin-panel.md`):
   admin-only login (rejects non-admins via `role` on `/api/me`), the sidebar shell, the live
   active-work view (`/api/admin/sessions/active`, 5 s auto-refresh, read-only), and activity
-  management (handelingen CRUD on `/api/activities`). **3b remaining:** reports/export
-  (all-users filtered CSV — current `/api/export` is self-scoped), user management
-  (better-auth `/api/auth/admin/*`), and manual entry/edit + admin stop/fix of a running
-  session (needs new backend endpoints).
+  management (handelingen CRUD on `/api/activities`).
+  **3b·1 implemented** (plan `docs/superpowers/plans/2026-06-17-phase-3b1-manual-sessions.md`):
+  manual session entry/edit + admin stop/discard of a running session (new admin write
+  endpoints `POST/PUT /api/admin/sessions[/:id]`, `…/:id/stop`, `…/:id/discard`, plus a
+  `GET /api/admin/users` roster), an admin **Sessies** screen (list + status filter +
+  create/edit form + row actions), Stop/Annuleer on the Live cards, and a worker stopwatch
+  that polls (15 s) and reconciles to server truth (converges within ~15 s when an admin
+  stops/cancels/edits a session — no stuck state). **3b remaining:** reports/export
+  (all-users filtered CSV — current `/api/export` is self-scoped) and user management
+  (better-auth `/api/auth/admin/*`).
   Activity management (add/edit/delete handelingen + their `insole_types`) was removed from the
   worker client in the Phase 2 follow-up because it is admin-only; it must be **ported here**. The
   backend already exists (`/api/activities` writes are admin-gated; `useActivities`/the legacy