fix(07-02): remove duplicate timeout on image pull

- Image pull had --max-time 600 --max-time 5 (second wins = 5s timeout)
- Removed duplicate, keeping 600s for large image pulls
- Added WEB-01 requirement for webhook fix in Phase 10
- Created 07-02-SUMMARY.md and 07-VERIFICATION.md

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.planning/STATE.md

@@ -5,7 +5,7 @@
 See: .planning/PROJECT.md (updated 2026-02-02)
 
 **Core value:** Immediate container control from your phone
-**Current focus:** v1.1 n8n API Access — enabling faster development iteration
+**Current focus:** v1.1 Socket Security complete — ready for Phase 8
 
 ## Current Position
 
@@ -42,11 +42,14 @@ Phase 11: Documentation Overhaul      [          ] Pending
 | Connectivity verified through network config | Docker DNS guarantees hostname resolution on same custom network | 07-01 |
 | Container create API allowed despite security risk | Update command needs container recreation; workflow logic controls params | 07-03 |
 | Verification via documented proxy behavior | Deployment environment constraints; tecnativa proxy behavior well-documented | 07-03 |
+| Credential name "Telegram account" | Matches actual n8n credential; ID I0xTTiASl7C1NZhJ | 07-02 |
+| docker.sock mount removed from n8n | All API calls now go through proxy; no direct socket access | 07-02 |
+| Webhook issue deferred to Phase 10 | WEB-01 added; bot works via manual execute for now | 07-02 |
 
 ### Todos
 
 - [x] Plan Phase 6 (n8n API Access) - Complete
-- [ ] Plan Phase 7 (Socket Security)
+- [x] Execute Phase 7 (Socket Security) - Complete
 
 ### Roadmap Evolution