docs: add release checklist

docs/development/ci-cd.md

@@ -8,6 +8,8 @@ The pipeline is defined in two workflow files:
 | `.github/workflows/ci.yml` | Lint → Test → Security → Docker → GitOps | Push to `main`/`develop`, pull requests, weekly schedule |
 | `.github/workflows/release.yml` | Semantic versioning & changelog | Push to `main` |
 
+Use the [Release Checklist](../deployment/release-checklist.md) before merging production changes and after the deployment updates.
+
 ---
 
 ## Pipeline Stages

docs/development/roadmap.md

@@ -69,13 +69,14 @@ Quality bar:
 Objective: make self-hosted deployments safer.
 
 Priority tasks:
-- Add a release checklist covering migrations, tests, and smoke checks.
+- Use the production hardening docs in at least one real production upgrade and capture any gaps.
 
 Delivered:
 - Documented a 1Password secret-injection deployment flow for local, Docker Compose, and systemd deployments.
 - Redacted secret-like values from mail-source diagnostics, stored import history, OAuth error logs, and validated admin auth contexts.
 - Added production startup validation for stable secrets, configured auth, auth-disabled mode, and Logto TLS verification.
 - Added database backup and restore guidance for SQLite and PostgreSQL deployments.
+- Added a release checklist covering migrations, tests, smoke checks, release automation, and rollback readiness.
 
 ## Later Milestones