docs: Update specifications to reflect configuration management implementation

Updated all spec-kit documents to document the implemented configuration
management features (User Story 12):

Changes:
- spec.md: Added User Story 12 with implementation status and functional
  requirements (FR-039 through FR-045)
- plan.md: Added Phase 2 (Configuration Management) as completed, updated
  phase status and last updated date
- data-model.md: Added GCoreServer entity with schema, validation rules,
  CRUD status, and critical implementation details
- tasks.md: Added Phase 13 for User Story 12 with implementation summary,
  updated task counts and dependencies
- tasks-revised-mvp.md: Added configuration management completion notice

Implementation Highlights:
- G-Core Server CRUD (CREATE, READ, DELETE working; UPDATE has known bug)
- Action Mapping CRUD (all operations working)
- SetupClient integration for .set file operations
- Critical cascade deletion bug fix (delete in reverse order)
- Comprehensive test scripts and verification tools

Documentation: SERVER_CRUD_IMPLEMENTATION.md, CRITICAL_BUG_FIX_DELETE.md

🤖 Generated with Claude Code (https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

specs/001-surveillance-api/plan.md

@@ -256,7 +256,61 @@ See [SDK_INTEGRATION_LESSONS.md](../../SDK_INTEGRATION_LESSONS.md) for complete
 - **RecordingService**: QueryRecordings, StartRecording, StopRecording
 - **AnalyticsService**: ConfigureAnalytics, GetAnalyticsConfig
 
-## Phase 2 - Tasks ⏭️ NEXT
+## Phase 2 - Configuration Management ✅ COMPLETED (2025-12-16)
+
+**Implemented**: GeViSoft configuration management via REST API and gRPC SDK Bridge
+
+**Deliverables**:
+- G-Core Server CRUD operations (CREATE, READ, DELETE working; UPDATE has known bug)
+- Action Mapping CRUD operations (CREATE, READ, UPDATE, DELETE all working)
+- SetupClient integration for configuration download/upload
+- Configuration tree parsing and navigation
+- Critical bug fixes (cascade deletion prevention)
+
+**Key Components Implemented**:
+
+### REST API Endpoints
+- `GET /api/v1/configuration/servers` - List all G-Core servers
+- `GET /api/v1/configuration/servers/{server_id}` - Get single server
+- `POST /api/v1/configuration/servers` - Create new server
+- `PUT /api/v1/configuration/servers/{server_id}` - Update server (⚠️ known bug)
+- `DELETE /api/v1/configuration/servers/{server_id}` - Delete server
+- `GET /api/v1/configuration/action-mappings` - List all action mappings
+- `GET /api/v1/configuration/action-mappings/{mapping_id}` - Get single mapping
+- `POST /api/v1/configuration/action-mappings` - Create mapping
+- `PUT /api/v1/configuration/action-mappings/{mapping_id}` - Update mapping
+- `DELETE /api/v1/configuration/action-mappings/{mapping_id}` - Delete mapping
+
+### gRPC SDK Bridge Implementation
+- **ConfigurationService**: Complete CRUD operations for servers and action mappings
+- **SetupClient Integration**: Download/upload .set configuration files
+- **FolderTreeParser**: Parse GeViSoft binary configuration format
+- **FolderTreeWriter**: Write configuration changes back to GeViSoft
+
+### Critical Fixes
+- **Cascade Deletion Bug** (2025-12-16): Fixed critical bug where deleting multiple action mappings in ascending order caused ID shifting, resulting in deletion of wrong mappings
+  - **Solution**: Always delete in reverse order (highest ID first)
+  - **Impact**: Prevented data loss of ~54 mappings during testing
+  - **Documentation**: CRITICAL_BUG_FIX_DELETE.md
+
+### Test Scripts
+- `comprehensive_crud_test.py` - Full CRUD verification with server and mapping operations
+- `safe_delete_test.py` - Minimal test to verify cascade deletion fix
+- `server_manager.py` - Production-ready server lifecycle management
+- `cleanup_to_base.py` - Restore configuration to base state
+- `verify_config_via_grpc.py` - Configuration verification tool
+
+### Known Issues
+- Server UPDATE operation fails with "Server ID is required" error (documented, workaround: delete and recreate)
+- Bool fields stored as int32 in GeViSoft configuration (acceptable - GeViSet reads correctly)
+
+**Documentation**:
+- [SERVER_CRUD_IMPLEMENTATION.md](../../SERVER_CRUD_IMPLEMENTATION.md) - Complete implementation guide
+- [CRITICAL_BUG_FIX_DELETE.md](../../CRITICAL_BUG_FIX_DELETE.md) - Cascade deletion bug analysis
+
+**Next**: Phase 3 - Implement remaining user stories (streams, events, analytics)
+
+## Phase 3 - Tasks ⏭️ NEXT
 
 **Command**: `/speckit.tasks`
 
@@ -275,7 +329,7 @@ Will generate:
 5. **Extended Features**: Recording management, analytics configuration
 6. **Testing & Documentation**: Contract tests, integration tests, deployment docs
 
-## Phase 3 - Implementation ⏭️ FUTURE
+## Phase 4 - Implementation ⏭️ FUTURE
 
 **Command**: `/speckit.implement`
 
@@ -389,6 +443,7 @@ async with websockets.connect(uri) as ws:
 
 ## References
 
+### Project Documentation
 - **Specification**: [spec.md](./spec.md) - User stories, requirements, success criteria
 - **Research**: [research.md](./research.md) - Technical decisions and architectural analysis
 - **Data Model**: [data-model.md](./data-model.md) - Entity schemas and relationships
@@ -397,7 +452,23 @@ async with websockets.connect(uri) as ws:
 - **SDK Lessons**: [../../SDK_INTEGRATION_LESSONS.md](../../SDK_INTEGRATION_LESSONS.md) - Critical SDK integration knowledge
 - **Constitution**: [../../.specify/memory/constitution.md](../../.specify/memory/constitution.md) - Development principles
 
+### SDK Documentation (Extracted & Searchable)
+**Location**: `C:\Gevisoft\Documentation\extracted_html\`
+
+- **Comprehensive SDK Reference**: `C:\DEV\COPILOT\gevisoft-sdk-reference.md`
+  - Complete guide to GeViSoft .NET SDK
+  - Action mapping implementation patterns
+  - Code examples and best practices
+  - Generated: 2025-12-11
+
+**Key Documentation Files**:
+- **Action Mapping**: `GeViSoft_SDK_Documentation\313Action Mapping.htm`
+- **State Queries**: `GeViSoft_SDK_Documentation\414StateQueries.htm`
+- **Database Queries**: `GeViSoft_SDK_Documentation\415DatabaseQueries.htm`
+- **GeViAPIClient Reference**: `GeViSoft_API_Documentation\class_ge_vi_a_p_i_client.html`
+- **CAction Reference**: `GeViSoft_API_Documentation\class_ge_vi_a_p_i___namespace_1_1_c_action.html`
+
 ---
 
-**Plan Status**: Phase 0 ✅ | Phase 1 ✅ | Phase 2 ⏭️ | Phase 3 ⏭️
-**Last Updated**: 2025-12-08
+**Plan Status**: Phase 0 ✅ | Phase 1 ✅ | Phase 2 ⏭️ | Phase 3 🔄 IN PROGRESS (Configuration Management ✅)
+**Last Updated**: 2025-12-16