docs(scheduler-agent): update design doc with cluster verification results

- Design doc v1.2: Phase 0-1 cluster verification status (read + submit OK,
  control HTTP 500 open bug-1490), bug table for whitelist/job_status fixes,
  mcp_operator queue:control note.
- Root + frontend CLAUDE.md: reflect verified state and apiserver bugs found.
- wolf memory/anatomy/buglog: log deployment session, bug-1489/bug-1490.

Co-Authored-By: Claude <noreply@anthropic.com>

.wolf/buglog.json

@@ -14507,5 +14507,42 @@
     ],
     "occurrences": 1,
     "last_seen": "2026-08-01T03:30:00Z"
+  },
+  {
+    "id": "bug-1489",
+    "timestamp": "2026-08-01",
+    "error_message": "POST /xce/v1/apikeys -> 403 \"URL is not allowed\": WhitelistURLMiddleware blocks it",
+    "file": "src/frontend/apiserver/middleware/whitelist.go",
+    "root_cause": "Phase 0 added apikeys route (routers.go:82) but never added /xce/v1/apikeys to WhitelistPOSTURL, so the URL whitelist middleware rejects it before RBAC",
+    "fix": "Added \"/xce/v1/apikeys\" to WhitelistPOSTURL in whitelist.go",
+    "tags": [
+      "apiserver",
+      "whitelist",
+      "apikeys",
+      "phase0"
+    ],
+    "related_bugs": [],
+    "occurrences": 1,
+    "last_seen": "2026-08-01"
+  },
+  {
+    "id": "bug-1490",
+    "timestamp": "2026-08-01",
+    "error_message": "POST /xce/v1/jobs/<id>/control action=kill/stop/resume returns 202 with \"job not found\" even though the job exists in store.Jobs (list shows it)",
+    "file": "src/frontend/apiserver/controllers/jobs.go",
+    "root_cause": "Chain of issues in apiserver job-control path. (1) job_status int64 assertion broke control (fixed: normalizeJobStatus in jobs.go). (2) After that fix, control now returns HTTP 500 \u2014 request never reaches the controller (controller log shows no control event). Likely a backend call to controller blocking/erroring inside apiserver. Not yet root-caused.",
+    "fix": "PARTIAL: jobs.go normalizeJobStatus() deployed. Control still returns HTTP 500 \u2014 open.",
+    "tags": [
+      "apiserver",
+      "job-control",
+      "http500",
+      "phase1-verify",
+      "open"
+    ],
+    "related_bugs": [
+      "bug-1489"
+    ],
+    "occurrences": 2,
+    "last_seen": "2026-08-01"
   }
 ]