docs(roadmap): record the two 1.0 criteria v0.25.0 met (#834)

- Per-platform CodeLLDB packages: published with provenance and verified
  by the release-gate canary across npx, global npm (with and without
  optional dependencies) and Docker on Linux x64/arm64, macOS arm64 and
  Windows.
- Build-provenance attestations: the Docker image and the PyPI launcher
  are now attested alongside the npm tarballs (#422); Silver remains.

Co-authored-by: JF <john.franklin@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: 3 people

ROADMAP.md

@@ -9,9 +9,9 @@ mcp-debugger gives AI agents step-through debugging over the Model Context Proto
 1.0 is defined by criteria, not dates. We cut 1.0 when all of the following hold:
 
 - **Tool-schema freeze.** The 28-tool surface and its response shapes are declared stable under SemVer: breaking changes to tool names, parameters, or response shapes require a major version. Prerequisite work: complete full parameter/response documentation in the [tool reference](docs/tool-reference.md) for the four tools currently summarized without schemas (`list_supported_languages`, `attach_to_process`, `detach_from_process`, `list_threads`).
-- **Per-platform CodeLLDB packages published and verified.** The five `@debugmcp/codelldb-*` platform packages (which let npm installs pull only the native debug engine for the current platform) are live on npm and verified across install channels (npx, global npm, Docker).
+- **Per-platform CodeLLDB packages published and verified.** ✅ Met in v0.25.0: the five `@debugmcp/codelldb-*` platform packages (which let npm installs pull only the native debug engine for the current platform) are live on npm with provenance, and the release-gate canary verified them across install channels (npx, global npm with and without optional dependencies, Docker) on x64/arm64 Linux, arm64 macOS and Windows.
 - **A full release cycle with no breaking behavioral changes.** One complete minor release soaks with no regressions that change documented tool behavior.
-- **Supply-chain milestones.** OpenSSF Best Practices Silver, and build-provenance attestations covering every distributed artifact — npm tarballs (done), the Docker image, and the PyPI launcher ([#422](https://github.com/debugmcp/mcp-debugger/issues/422)).
+- **Supply-chain milestones.** OpenSSF Best Practices Silver, and build-provenance attestations covering every distributed artifact — npm tarballs, the Docker image and the PyPI launcher are all attested as of v0.25.0 ([#422](https://github.com/debugmcp/mcp-debugger/issues/422)); OpenSSF Silver remains.
 
 ## Near-term themes