docs(backlog): mark llama health probe shipped, add QA plan

Flip §A LLAMA_SERVER probe to pending-live-QA (aaf896d), register the QA
gate in §F, and add docs/qa/QA-llama-health-probe.md with observable-evidence
checks (liveness up/down/restore, non-2xx, tps degrade, restart hysteresis,
replay independence).

BACKLOG.md

@@ -26,8 +26,10 @@ against current code before acting (memory is point-in-time).
 Metrics + CLI + TUI pane and the health backbone are shipped (fe94140, 4f6bfa8,
 f8fd260) — those are RETRO candidates once live-QA'd. Remaining:
 
-- [ ] **§4 LLAMA_SERVER health probe** — liveness + tokens/sec degradation trend
-      (session-scoped, needs HTTP). Same `HealthProbe` framework as the shipped disk probe.
+- [~] **§4 LLAMA_SERVER health probe** — **SHIPPED (pending live-QA)** `aaf896d`. Liveness via
+      `GET /health` + tokens/sec degradation watch (windowed avg of recorded `InferenceCompletedEvent`s,
+      opt-in via `llama_tps_warn_below`). Plugs into the existing `HealthMonitor`. QA gate in §F →
+      `docs/qa/QA-llama-health-probe.md`.
 - [ ] **§4 EVENT_STORE health probe** — append + fsync latency heartbeat.
 - [ ] **§4/§3 live health TUI pane** — deferred to follow the metrics cadence
       (projection + CLI first, then pane). `correx health` CLI already exists.
@@ -120,6 +122,9 @@ These are SHIPPED in code but prompt-/server-/network-dependent and not yet live
 - [ ] **Clarification loop + workflow-propose panel live-QA** — both prompt-dependent (need a
       real router/analyst model to emit the structured json blocks).
 - [ ] **Research workflow live-QA** — see §D.
+- [ ] **LLAMA_SERVER health probe live-QA** — `aaf896d`; needs a real llama-server to ping.
+      Plan: `docs/qa/QA-llama-health-probe.md` (liveness up/down/restore, non-2xx, tps degrade,
+      restart hysteresis, replay independence).
 - [ ] **TUI kernel-steering + AMD gauge fresh live-QA** — approve+note actually revising the
       *same* stage's output; AMD VRAM/RAM gauge on the real box.
 - [ ] **Unit-tested-only fixes, not live-verified:** `1a7eb05` (verdict-edge rejection),