Spec native Dosh auth and forwarding v1

SPEC.md

@@ -3,7 +3,8 @@
 **Status:** Implemented Rust build with local and Docker SSH verification  
 **Default language:** Rust, unless benchmarks prove the stack is the bottleneck  
 **Binaries:** `dosh-server`, `dosh-client`, `dosh-auth`, `dosh-bench`  
-**Helper mode:** `dosh-server auth` or `~/.local/bin/dosh-auth`, invoked by SSH with `-T`
+**Helper mode:** `dosh-server auth` or `~/.local/bin/dosh-auth`, invoked by SSH with `-T`  
+**Native v1 plan:** `docs/NATIVE_V1_SPEC.md`
 
 ---
 
@@ -17,7 +18,9 @@ as quickly as possible.
 The daemon is resident. Sessions are named. A session owns one PTY and one
 authoritative terminal screen. Clients attach to that session over encrypted UDP.
 SSH is used for first trust establishment and as fallback when cached credentials are
-missing, expired, or rejected.
+missing, expired, or rejected. Native Dosh auth is specified separately in
+`docs/NATIVE_V1_SPEC.md` as the path toward replacing the day-to-day SSH workflow on
+Dosh-installed servers.
 
 ---