docs(02-02): complete PermissionsService plan — models, interface, scan engine

- Created 02-02-SUMMARY.md with full execution record
- Updated STATE.md with decisions (CSOM type constraints) and progress
- Updated ROADMAP.md (phase 02: 4/7 summaries, In Progress)
- Marked PERM-07 complete in REQUIREMENTS.md

.planning/STATE.md

@@ -3,14 +3,14 @@ gsd_state_version: 1.0
 milestone: v1.0
 milestone_name: milestone
 status: planning
-stopped_at: Completed 02-01-PLAN.md — Wave 0 test scaffold for permissions phase
-last_updated: "2026-04-02T11:55:45.013Z"
+stopped_at: Completed 02-02-PLAN.md
+last_updated: "2026-04-02T11:56:31.288Z"
 last_activity: 2026-04-02 — Roadmap created, requirements mapped, all 42 v1 requirements assigned to phases
 progress:
   total_phases: 5
   completed_phases: 1
   total_plans: 15
-  completed_plans: 11
+  completed_plans: 12
   percent: 13
 ---
 
@@ -62,6 +62,7 @@ Progress: [█░░░░░░░░░] 13%
 | Phase 02-permissions P05 | 1min | 1 tasks | 3 files |
 | Phase 02-permissions P03 | 1min | 1 tasks | 5 files |
 | Phase 02-permissions P01 | 5min | 2 tasks | 9 files |
+| Phase 02-permissions P02 | 7min | 2 tasks | 4 files |
 
 ## Accumulated Context
 
@@ -101,6 +102,8 @@ Recent decisions affecting current work:
 - [Phase 02-permissions]: InternalsVisibleTo added to AssemblyInfo.cs — required for test project to access internal DeriveAdminUrl; plan omitted this assembly attribute
 - [Phase 02-permissions]: Export service stubs created in Plan 02-01 so test project compiles before Plan 03 implementation
 - [Phase 02-permissions]: Principal.Email removed from CSOM load expression — Email only exists on User subtype, not Principal base class
+- [Phase 02-permissions]: Folder is not a SecurableObject in CSOM — ListItem used for permission extraction — Required by CSOM type system; Folder inherits from ClientObject not SecurableObject
+- [Phase 02-permissions]: Principal.Email excluded from CSOM Include — email not needed for PermissionEntry — Principal base type has no Email property; only User subtype does; avoids CS1061
 
 ### Pending Todos
 
@@ -114,6 +117,6 @@ None yet.
 
 ## Session Continuity
 
-Last session: 2026-04-02T11:55:36.761Z
-Stopped at: Completed 02-01-PLAN.md — Wave 0 test scaffold for permissions phase
+Last session: 2026-04-02T11:56:31.286Z
+Stopped at: Completed 02-02-PLAN.md
 Resume file: None