docs(memory-bank): add creative phase CP-4 path safety

Решение: allowlist *.log, EvalSymlinks, проверка префикса root; creative phase завершён.

Co-authored-by: Cursor <[email protected]>

memory-bank/tasks.md

@@ -8,7 +8,7 @@
 |------|----------|
 | **Task ID** | `settings-ui-and-runtime-logs` |
 | **Complexity** | **Level 4** |
-| **Status** | **PLAN complete** → `/creative` |
+| **Status** | **CREATIVE complete** → `/build` |
 | **Дата VAN** | 2026-06-12 |
 | **Дата PLAN** | 2026-06-12 |
 
@@ -320,7 +320,7 @@ graph TD
 - [x] **CP-1 uiux** — `creative-tenant-settings-ui.md` ✅ Tabs `/tenant-settings`, nav «Параметры»
 - [x] **CP-2 uiux** — `creative-runtime-logs-ui.md` ✅ Monitoring tab `runtime-logs` + sub-tabs files/audit
 - [x] **CP-3 algorithm** — `creative-runtime-logs-cleanup.md` ✅ truncate default, max 512MiB, tail 200/2000 lines, 256KiB
-- [ ] **CP-4 architecture** — `creative-runtime-logs-path-safety.md`
+- [x] **CP-4 architecture** — `creative-runtime-logs-path-safety.md` ✅ regex + EvalSymlinks + root prefix check
 
 ---
 
@@ -340,7 +340,7 @@ graph TD
 
 - [x] VAN
 - [x] PLAN
-- [ ] CREATIVE (4 docs)
+- [x] CREATIVE (4 docs)
 - [ ] BUILD Phase 1–7
 - [ ] REFLECT
 - [ ] ARCHIVE