Reorganize roadmap: add Phase 10 API Endpoints, renumber Security Audit

- API Endpoints promoted from Future Considerations to Phase 10 (v0.10.0)
- Security Audit moved from Phase 10 to Phase 11 (v0.11.0)
- Updated version milestones table accordingly

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

PLAN.md

@@ -194,7 +194,14 @@ This document outlines the implementation plan for the WP BnB Management plugin.
   - 24 panels with gauges, pie charts, and stat displays
 - [x] Update settings page to enable/disable metrics
 
-## Phase 10: Security Audit (v0.10.0)
+### Phase 10: API Endpoints (v0.10.0)
+
+- [ ] REST API for rooms
+- [ ] REST API for availability
+- [ ] REST API for bookings
+- [ ] Authentication and rate limiting
+
+## Phase 11: Security Audit (v0.11.0)
 
 - [ ] Check for Wordpress best-practices
 - [ ] Review the code for OWASP Top 10, including XSS, XSRF, SQLi and other critical threads
@@ -208,13 +215,6 @@ This document outlines the implementation plan for the WP BnB Management plugin.
 - [ ] Order management
 - [ ] Refund handling
 
-### API Endpoints
-
-- [ ] REST API for rooms
-- [ ] REST API for availability
-- [ ] REST API for bookings
-- [ ] Authentication and rate limiting
-
 ### Multi-language Support
 
 - [ ] Full translation support
@@ -317,5 +317,6 @@ The plugin will provide extensive hooks for customization:
 | 0.7.0   | CF7 Integration    | Complete |
 | 0.8.0   | Dashboard          | Complete |
 | 0.9.0   | Prometheus Metrics | Complete |
-| 0.10.0  | Security Audit     | TBD      |
+| 0.10.0  | API Endpoints      | TBD      |
+| 0.11.0  | Security Audit     | TBD      |
 | 1.0.0   | Stable Release     | TBD      |