Make telemetry and validation dependencies visible

The central Planner backlog gives detection, telemetry and control gaps an intake, triage/refinement, delivery and closure lifecycle. The proposed coverage model then links a threat scenario to data requirements, detection logic and validation evidence, so each part of the coverage claim can be assessed separately.