chore: add pentest verification script and wire into overnight loop

- scripts/verify-pentest-fixes.sh: 26-check automated verification
  that tests all 21 pentest findings against the live server
- loop/plan.md: add permanent post-fix verification section
- scripts/overnight-loop.sh: accept plan file arg, run verification
  after all fixes complete

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

scripts/overnight-loop.sh

@@ -1,8 +1,11 @@
 #!/bin/bash
 cd /Users/dorian/Projects/archy
 
+# Default to the pentest fix plan; override with $1
+PLAN="${1:-.claude/plans/reflective-meandering-castle.md}"
+
 while true; do
-  claude -p "Read .claude/plans/reflective-meandering-castle.md — execute the next task not marked [DONE]. After completing, deploy with ./scripts/deploy-to-target.sh --live, mark it [DONE] in the plan file, commit and push. If all tasks are [DONE], write a summary report and exit." \
+  claude -p "Read $PLAN — execute the next task not marked [DONE]. After completing, deploy with ./scripts/deploy-to-target.sh --live, mark it [DONE] in the plan file, commit and push. If all tasks are [DONE], run ./scripts/verify-pentest-fixes.sh to validate, write a summary report and exit." \
     --max-turns 50 \
     --allowedTools "Edit,Write,Bash,Read,Glob,Grep,Agent,WebFetch,WebSearch"