docs(progress): Round 17.5 + Round 18 sections

[tomqwu]

Summary

Documents the two PR bursts since the Round 17 progress.md update.

Round 17.5 — Live Azure deploy (3 PRs, 2026-05-11)

First live `terraform apply` against the user's Azure Sponsorship tenant surfaced three runtime issues no unit test had caught. Each shipped as a focused fix.

PR	Fix
#282	Wire `DATABASE_URL` into the dashboard Container App + hoist `local.postgres_database_url` so it can't drift
#283	Strip the `authentication=azure_ad` query parameter (psycopg2 rejects it); fetch Entra-ID token via DefaultAzureCredential and pass as password
#284	Set `AZURE_CLIENT_ID` env var on both Container Apps (UAMI selector); use AD admin `principal_name` (not object_id) as the Postgres user; hoist to `local.postgres_admin_principal_name`

End result: live deploy at `https://ca-aml-api-dev.wittyhill-44456789.canadacentral.azurecontainerapps.io\`. `/api/v1/health` returns 200, both pods read/write Postgres via Entra-ID UAMI auth.

Round 18 — Plant fan-out + Azure Phase B (6 PRs, 2026-05-12)

PR	Workstream
#285	Pin `counterparty_id` as evidence column on `unusual_send_hour_for_customer_rtp`
#286	Plant 4-mule `device_id` cluster (C0024-C0027) → us_rtp_fednow 4/5 → 5/5
#287	Azure OpenAI as 4th GenAI assistant backend (key + Entra-ID auth paths)
#288	Sentinel SIEM connector — active push to Log Analytics via Data Collector API
#289	Purview lineage push via Atlas REST API

Six items deferred to Round 19 (spec-specific noise patterns, perf harness, python_ref lineage hook, PII masking, engine backend abstraction, dbt generator, audit-ledger emit hooks, Logs Ingestion API migration).

Test plan

• Docs-only change; no runtime code touched
• PR numbers verified against `git log main` and `gh pr view` for fix(terraform): wire DATABASE_URL into dashboard Container App #282-feat(integrations): Purview lineage push via Atlas REST API #289
• CI green (lint + e2e on docs)

🤖 Generated with Claude Code