parity(docs): record D13 — retail storefront preserved but out of scope

The owner ruled that the reference also ran a retail storefront (B2C
single-customer shop) and that the wallet, cashback and
ConfigStatic['percent'] belong to it. These are preserved exactly as they
are: nothing deleted or disabled on either side, no parity work, listed in
the matrices with status "preserved — out of current scope" and no gap or
work row. Shared surfaces (product, variant, price, order, customer) need
the owner's approval before a change that could reach the storefront.

Classifying the endpoints for that split surfaced a counting error in the
Phase 0 inventory: routes/admin.php has 151 live explicit routes, not the
117 recorded, so the reference total is 412 and not 369 (logged DOC-01).
get-analytics-tak reads SingleCustomerOrders, so it is a storefront route
despite its neutral name (logged DOC-02).

Of the 412 reference endpoints, 109 are retail storefront, 15 are web.php
dev/ops closures, and 288 remain in scope (218 admin + 70 B2B app).

[ref: henza_server/routes/{admin,api,customer,site,web}.php]

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

docs/parity/PROGRESS.md

@@ -51,7 +51,7 @@ while the id and the id-addressed routes remain.**
 
 ## ⚠️ Read `DECISIONS.md` before doing anything
 
-All user rulings live there (D0–D12). Highlights that change how work is done:
+All user rulings live there (D0–D13). Highlights that change how work is done:
 
 - **D12 — the matrix is FIELD-BY-FIELD, not page-by-page**, and a 4-step
   round-trip test per entity is mandatory. Both rules were added to the
@@ -61,6 +61,13 @@ All user rulings live there (D0–D12). Highlights that change how work is done:
 - **D4** — never port broken behaviour, but match calculations/rounding/messages
   exactly; annotate each non-replication «عمداً تکرار نشد — ISSUE #n».
 - **D2** — target-only features get status ➕ and are left alone.
+- **D13** — the **retail storefront** (48 `customer.php` + 30 `site.php` + 31
+  storefront-management admin routes = **109 of the reference's 412 endpoints**)
+  is **preserved but out of scope**: status ⏸️, no gap row, no work row, nothing
+  deleted or disabled. **288 endpoints stay in scope** (218 admin + 70 B2B app).
+  Note: the reference total is **412, not 369** — `admin.php` was undercounted
+  in Phase 0; corrected in `00-INVENTORY.md` §2.1.
+  Ask before changing shared surfaces (product, variant, price, order, customer).
 
 ## Phase checklist
 
@@ -95,6 +102,7 @@ All user rulings live there (D0–D12). Highlights that change how work is done:
 | D10 | Sales expert: keep `AdminUser`; investigate the 5 missing fields; propose `SalesExpertProfile`. |
 | D11 | `singleCustomer.vue` → diff-send. |
 | D12 | **Field-by-field matrix + mandatory round-trip test.** Added to the skill. |
+| D13 | **Retail storefront (wallet, cashback, `ConfigStatic['percent']`) preserved but OUT OF SCOPE.** Nothing deleted or disabled; no parity work; matrices list it ⏸️ with no gap/work row; ask before touching shared surfaces. |
 
 ## Open — awaiting user approval