test(13): persist human verification items as UAT

SC#2 (admin UI row) and the manual-route halves of SC#3/SC#4 need a
human with an authenticated browser session — tracked here so they
surface in /gsd:progress and /gsd:audit-uat rather than being silently
dropped when the phase's plan-level tracking shows complete.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LHRgZqkzBHBbAbc3KHneuR

.planning/phases/13-scheduler-admin-toggle/13-HUMAN-UAT.md

@@ -0,0 +1,36 @@
+---
+status: partial
+phase: 13-scheduler-admin-toggle
+source: [13-03-SUMMARY.md]
+started: 2026-07-11T15:10:00Z
+updated: 2026-07-11T15:10:00Z
+---
+
+## Current Test
+
+[awaiting human testing]
+
+## Tests
+
+### 1. PAX8 appears as a toggleable row on /admin/integrations (SC#2)
+expected: A "PAX8" row (category Finance) with an enable/disable control appears alongside the other integrations.
+result: [pending]
+
+### 2. POST /api/pax8/sync returns 403 while PAX8 is disabled (SC#3, manual-route half)
+expected: From an authenticated session, disable PAX8 on /admin/integrations, then POST /api/pax8/sync (e.g. via a devtools fetch or curl with your session cookie) returns HTTP 403 with body `{"error":"PAX8 is disabled",...}`.
+result: [pending]
+
+### 3. POST /api/pax8/sync succeeds after re-enabling (SC#4, manual-route half)
+expected: Re-enable PAX8, then POST /api/pax8/sync returns 200 (`{"ok":true,...}`).
+result: [pending]
+
+## Summary
+
+total: 3
+passed: 0
+issues: 0
+pending: 3
+skipped: 0
+blocked: 0
+
+## Gaps