docs(17-01): complete SharePointGroupResolver service plan - SUMMARY, STATE, ROADMAP updated

.planning/STATE.md

@@ -3,14 +3,14 @@ gsd_state_version: 1.0
 milestone: v2.3
 milestone_name: Tenant Management & Report Enhancements
 status: planning
-stopped_at: Completed 16-02-PLAN.md
-last_updated: "2026-04-09T10:43:01.998Z"
+stopped_at: Completed 17-01-PLAN.md
+last_updated: "2026-04-09T11:06:09.877Z"
 last_activity: 2026-04-09 — Roadmap created for v2.3 (phases 15-19)
 progress:
   total_phases: 5
   completed_phases: 2
-  total_plans: 4
-  completed_plans: 4
+  total_plans: 6
+  completed_plans: 5
 ---
 
 # Project State
@@ -68,6 +68,8 @@ Decisions are logged in PROJECT.md Key Decisions table.
 - [Phase 16-01]: PermissionsViewModel gets MergePermissions as no-op placeholder reserved for future use
 - [Phase 16-report-consolidation-toggle]: BuildConsolidatedHtml is a private method via early-return in BuildHtml — existing code path completely untouched
 - [Phase 16-report-consolidation-toggle]: Separate locIdx counter for location groups (loc0, loc1...) distinct from grpIdx for user groups (ugrp0...) prevents ID collision
+- [Phase 17]: Static helpers IsAadGroup/ExtractAadGroupId/StripClaims declared internal to enable unit testing via InternalsVisibleTo without polluting public API
+- [Phase 17]: Graph client created lazily on first AAD group encountered to avoid unnecessary auth overhead for groups with no nested AAD members
 
 ### Pending Todos
 
@@ -79,7 +81,7 @@ None.
 
 ## Session Continuity
 
-Last session: 2026-04-09T10:39:46.923Z
-Stopped at: Completed 16-02-PLAN.md
+Last session: 2026-04-09T11:06:05.361Z
+Stopped at: Completed 17-01-PLAN.md
 Resume file: None
 Next step: `/gsd:plan-phase 15`