docs: record Phase 5 next-steps roadmap

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Bg76sLc43Wc3j5ZcLkboYR

docs/cinematic-highlight-poc-plan.md

@@ -144,6 +144,21 @@ better music, NO voiceover, bolder finish. Done so far (commit 842f2a7):
 Verified: mvn 247/0; final −16.5 LUFS, TP −2.7 dBTP, 1080p, no VO. Deliverable:
 `output/localpoc/highlight-projects/dji_21230510013241_0091_d/final.mp4`.
 
+### Phase 5 — Next steps (roadmap as of 2026-07-22, after montage mode)
+To reach genuinely cinematic output (Gate B):
+- [ ] P5.1 **Better source footage** (biggest lever; source is the real ceiling — parked car / industrial lot).
+- [ ] P5.2 **Automate shot selection** — generate the montage shot list from analysis (scene cuts + CV
+      quality/variety) instead of the current hand-authored `montage.json`.
+- [ ] P5.3 **Better music** — musicgen-medium/large (slow) or licensed production track; one produced score.
+- [ ] P5.4 Polish: proper `zoompan` in-shot push-in; beat-synced cut lengths; better/optional voice.
+To make it a real system:
+- [ ] P5.5 **Resident local director** writes the edit/montage plan (handover Step 3; today plans are manual).
+To reach production (deferred until quality passes):
+- [ ] P5.6 Formal Gate B human review (rubric in cinematic-highlight-acceptance-review.md).
+- [ ] P5.7 **Licensing blocker**: MusicGen CC-BY-NC, AudioLDM2 CC-BY-NC-SA, YOLOv8 AGPL are non-commercial/
+      copyleft -> production needs commercially-licensed models/assets.
+- [ ] P5.8 The hardening backlog below (security, CI/CD, containers, PostgreSQL, no-egress cert, repro build).
+
 ## Deferred (until output-quality gate passes)
 Production hardening: Spring Security/OIDC, PostgreSQL/Testcontainers, containers/K8s, CI/CD, distributed
 ops, digest-bound authenticated approval. Recorded, not deleted.