ops: kuma api key, voice verification, desk_active doc

- created kuma API key uk5_mavpoll-key, wired into mavpoll
- fixed basic auth field (kuma expects key as password, not username)
- switched mavpoll to network_mode: host (compose bridge can't reach host)
- fixed stale voice bind comment in docker-compose.yml
- verified voice listening on :9100, cross-container reachable
- updated PROGRESS.md ops footnote
- added ROADMAP.md

cmd/mavpoll/main.go

@@ -323,7 +323,7 @@ func (p *poller) get(ctx context.Context, url, basicUser string) ([]byte, error)
 		return nil, err
 	}
 	if basicUser != "" {
-		req.SetBasicAuth(basicUser, "") // kuma: API key as username, empty password
+		req.SetBasicAuth("", basicUser) // kuma: API key as password, empty username
 	}
 	resp, err := p.http.Do(req)
 	if err != nil {