feat: Document completed tasks for KMS, Cryptography, and Plugin Libraries

- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys.
- Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations.
- Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.

docs/modules/telemetry/operations/collector.md

@@ -39,7 +39,7 @@ docker compose -f docker-compose.telemetry-storage.yaml up -d
 python ../../ops/devops/telemetry/smoke_otel_collector.py --host localhost
 ```
 
-The smoke test posts sample traces, metrics, and logs and verifies that the collector increments the `otelcol_receiver_accepted_*` counters exposed via the Prometheus exporter. The storage overlay gives you a local Prometheus/Tempo/Loki stack to confirm end-to-end wiring. The same client certificate can be used by local services to weave traces together. See [`Telemetry Storage Deployment`](telemetry-storage.md) for the storage configuration guidelines used in staging/production.
+The smoke test posts sample traces, metrics, and logs and verifies that the collector increments the `otelcol_receiver_accepted_*` counters exposed via the Prometheus exporter. The storage overlay gives you a local Prometheus/Tempo/Loki stack to confirm end-to-end wiring. The same client certificate can be used by local services to weave traces together. See [`Telemetry Storage Deployment`](storage.md) for the storage configuration guidelines used in staging/production.
 
 ---
 

docs/modules/telemetry/operations/storage.md

@@ -27,6 +27,7 @@ cd deploy/compose
 docker compose -f docker-compose.telemetry.yaml up -d
 docker compose -f docker-compose.telemetry-storage.yaml up -d
 python ../../ops/devops/telemetry/smoke_otel_collector.py --host localhost
+python ../../ops/devops/telemetry/validate_storage_stack.py
 ```
 
 Configuration files live in `deploy/telemetry/storage/`. Adjust the overrides before shipping to staging/production.
@@ -160,6 +161,7 @@ Provision the following secrets/configs (names can be overridden via Helm values
 - [ ] Prometheus scrape succeeds (`curl -sk --cert client.crt --key client.key https://collector:9464`).
 - [ ] Tempo and Loki report tenant activity (`/api/status`).
 - [ ] Retention policy tested by uploading sample data and verifying expiry.
+- [ ] `python ops/devops/telemetry/validate_storage_stack.py` passes before committing updated configs.
 - [ ] Alerts wired into SLO evaluator (DEVOPS-OBS-51-001).
 - [ ] Component rule packs imported (e.g. `docs/modules/scheduler/operations/worker-prometheus-rules.yaml`).