chore: update progress for US-056

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: NathanFlurry

progress.txt

@@ -2721,3 +2721,16 @@ PRD: ralph/kernel-hardening (46 stories)
   - Drop cleanup for Option<OwnedIsolate> needs .take() instead of direct drop
   - Pre-existing SIGSEGV on V8 teardown when multiple V8 test suites (snapshot, execution, bridge) run in same process — individual test suites all pass
 ---
+
+## 2026-03-19 - US-056
+- Added eager snapshot warm-up on module load
+- composeBridgeCodeForWarmup() in execution-driver.ts produces default bridge code (timingMitigation='none', default budgets)
+- V8RuntimeOptions.warmupBridgeCode allows callers to specify bridge code for pre-warming
+- runtime.ts sends WarmSnapshot after authenticate() unless SECURE_EXEC_NO_SNAPSHOT_WARMUP=1
+- getSharedV8Runtime() passes composeBridgeCodeForWarmup() to createV8Runtime()
+- composeBridgeCodeForWarmup exported from @secure-exec/node package index
+- Files changed: packages/secure-exec-v8/src/runtime.ts, packages/secure-exec-node/src/execution-driver.ts, packages/secure-exec-node/src/index.ts
+- **Learnings for future iterations:**
+  - Bridge code composition depends on imports from both @secure-exec/core and @secure-exec/node — can't live in @secure-exec/v8 (wrong dependency direction)
+  - warmupBridgeCode is passed as option to createV8Runtime() to avoid circular deps between @secure-exec/v8 and @secure-exec/node
+---

scripts/ralph/prd.json

@@ -949,8 +949,8 @@
         "Tests pass"
       ],
       "priority": 56,
-      "passes": false,
-      "notes": "Spec: docs-internal/specs/v8-startup-snapshot.md. composeBridgeCodeForWarmup uses timingMitigation='none' and default maxTimers/maxHandles/cwd/payloadLimit. Fire-and-forget — host does not wait for response."
+      "passes": true,
+      "notes": "Spec: docs-internal/specs/v8-startup-snapshot.md. composeBridgeCodeForWarmup uses timingMitigation='none' and default maxTimers/maxHandles/cwd/payloadLimit. Fire-and-forget — host does not wait for response. warmupBridgeCode passed via V8RuntimeOptions; runtime.ts sends WarmSnapshot after authenticate() unless SECURE_EXEC_NO_SNAPSHOT_WARMUP=1."
     },
     {
       "id": "US-057",