refactor(01): address plan-checker revisions (1 blocker, 5 warnings)

- 01-02: wave 1→2, depends_on [01]; drop unused androidLibrary classpath
  entry; guard Kotlin compilerOptions with plugins.withId listeners
- 01-05: remove misleading 'gradle exit' echo from verify block
- 01-06: harden credential check on docker-compose.yml alone
- 01-07: drop hardcoded /Users/rwilk/dev/repo/recipe cd prefix
- 01-RESEARCH: rename Open Questions → (RESOLVED); replace
  'Recommendation:' with 'RESOLVED:' per gsd Dimension 11 convention

.planning/phases/01-project-infrastructure-module-wiring/01-02-PLAN.md

@@ -2,8 +2,8 @@
 phase: 01-project-infrastructure-module-wiring
 plan: 02
 type: execute
-wave: 1
-depends_on: []
+wave: 2
+depends_on: [01]
 files_modified:
   - build-logic/settings.gradle.kts
   - build-logic/build.gradle.kts
@@ -169,7 +169,6 @@ pluginManagement {
   dependencies {
       compileOnly(libs.plugins.kotlinMultiplatform.asDependency())
       compileOnly(libs.plugins.androidApplication.asDependency())
-      compileOnly(libs.plugins.androidLibrary.asDependency())
       compileOnly(libs.plugins.composeMultiplatform.asDependency())
       compileOnly(libs.plugins.composeCompiler.asDependency())
       compileOnly(libs.plugins.composeHotReload.asDependency())
@@ -209,11 +208,23 @@ pluginManagement {
       }
   }
 
-  // D-11 redundancy guard: if a module applies recipe.quality WITHOUT recipe.kotlin.multiplatform
-  // (e.g. a future pure-JVM utility), ensure allWarningsAsErrors still applies.
-  tasks.withType<org.jetbrains.kotlin.gradle.tasks.KotlinCompilationTask<*>>().configureEach {
-      compilerOptions {
-          allWarningsAsErrors.set(true)
+  // D-11 redundancy guard: if a module applies recipe.quality alongside a Kotlin plugin
+  // (multiplatform or jvm), ensure allWarningsAsErrors still applies even if the module
+  // build didn't already configure it. Guarded with plugins.withId so this plugin is
+  // safely composable even when applied alone (no KotlinCompilationTask type available
+  // on the classpath until a Kotlin plugin is present).
+  plugins.withId("org.jetbrains.kotlin.multiplatform") {
+      tasks.withType<org.jetbrains.kotlin.gradle.tasks.KotlinCompilationTask<*>>().configureEach {
+          compilerOptions {
+              allWarningsAsErrors.set(true)
+          }
+      }
+  }
+  plugins.withId("org.jetbrains.kotlin.jvm") {
+      tasks.withType<org.jetbrains.kotlin.gradle.tasks.KotlinCompilationTask<*>>().configureEach {
+          compilerOptions {
+              allWarningsAsErrors.set(true)
+          }
       }
   }
   ```
@@ -425,7 +436,7 @@ pluginManagement {
     - `build-logic/settings.gradle.kts` ends with `rootProject.name = "build-logic"`
     - `build-logic/build.gradle.kts` contains `` `kotlin-dsl` `` (triple-backtick plugin alias)
     - `build-logic/build.gradle.kts` defines the `Provider<PluginDependency>.asDependency()` extension function
-    - `build-logic/build.gradle.kts` has exactly 10 `compileOnly(libs.plugins.*.asDependency())` calls (kotlinMultiplatform, androidApplication, androidLibrary, composeMultiplatform, composeCompiler, composeHotReload, kotlinJvm, ktor, spotless, flywayPlugin)
+    - `build-logic/build.gradle.kts` has exactly 9 `compileOnly(libs.plugins.*.asDependency())` calls (kotlinMultiplatform, androidApplication, composeMultiplatform, composeCompiler, composeHotReload, kotlinJvm, ktor, spotless, flywayPlugin) — no `androidLibrary` because no precompiled plugin applies `com.android.library`; `shared/build.gradle.kts` applies that alias directly
     - `recipe.kotlin.multiplatform.gradle.kts` contains `id("org.jetbrains.kotlin.multiplatform")` (exactly ONCE, in the plugins block)
     - `recipe.kotlin.multiplatform.gradle.kts` contains `baseName = "ComposeApp"` (D-20 / PITFALL #10)
     - `recipe.kotlin.multiplatform.gradle.kts` contains `jvmToolchain(21)` AND `JvmTarget.JVM_11` AND `JvmTarget.JVM_21` (D-08 split)