new-apps report; Monica closed on the operator's word (R-927)

The operator was asked at the end, as the brief said, and ruled: keep Monica
out. R-927 opened and closed in the same session, with the measurements and the
sentence worth keeping — an app is not added because a gap exists, it is added
because the app can be kept. Register 137 -> 138: 2 opened, 1 closed.

Also in here: the two small things seen and not filed (remove leaves hold-logs
in the stack directory, with no secret in it; the catalog clone's pre-push hook
is unarmed, so the gates were run by hand before the commit and by CI after).

STATUS.md

@@ -3,7 +3,7 @@
 **Ready for the first real tester (Tester-2): yes. Tester 2 (a laptop) is off; nothing was sent to it.**
 
 **Updated 2026-10-10: hub 0.145.0; demo-hp, demo-felhom and Tester 1 run agent 0.154.0 and controller
-0.305.0. The open-items list is at 139. Reports: `REPORT-new-apps-2026-10-10.md`, `REPORT-release-2026-10-10.md`, `REPORT-break-the-circle-2026-10-09.md`, `REPORT-dooplex-survival-2026-10-09.md`, `REPORT-day4-2026-10-09.md`.**
+0.305.0. The open-items list is at 138. Reports: `REPORT-new-apps-2026-10-10.md`, `REPORT-release-2026-10-10.md`, `REPORT-break-the-circle-2026-10-09.md`, `REPORT-dooplex-survival-2026-10-09.md`, `REPORT-day4-2026-10-09.md`.**
 
 ## Saturday 2026-10-10 (afternoon): two new apps in the catalogue, and one that was stopped
 
@@ -15,7 +15,8 @@
   stable version" has not moved since May 2024; and the two commits that ended a 13-month silence add a notice
   saying the authors' own hosted service and all its data will be deleted at the end of December 2026, before a
   rewrite. Keeping it out costs us nothing we have today — no app covers a family address book either way, and
-  Radicale already carries contacts to a phone. **If you do nothing, it stays out.**
+  Radicale already carries contacts to a phone. **You decided: keep it out.** Written up and closed
+  (R-927) so it can be looked at again when the rewrite ships.
 - **Two real faults were found and fixed before either app was offered to anyone:**
   1. LubeLogger **ships with no login at all**. On a default install a stranger who found the address could read
      the family's car records *and add to them*. I measured exactly that, and our install now turns the app's own