Document runwhen-local upstream limitations found during validation

Iteration 1 validation surfaced two bugs in runwhen-local 0.11.0 that
prevent cluster-scoped CRDs (like Crossplane GCP Buckets) from being
discovered:

  1. NameError: KubernetesResourceTypeSpec is not defined
     (kubeapi.py:1125 references a symbol never imported)
  2. list_namespaced_custom_object returns 404 for cluster-scoped CRDs
     (the loop always calls the namespaced API path)

Added docs/08-current-limitations.md with symptoms, causes, and
one-line / small-patch proposed fixes for both. Updated the iteration
checklist in docs/07 to reflect this and added the missing docs entry
to the top-level README.

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/07-validate-and-observe.md

@@ -130,13 +130,25 @@ Screenshot placeholders:
 
 ## Iteration checklist
 
-- [ ] Iteration 1: end-to-end plumbing works, SLXs are generated,
-      SLI graphs are populated. **(You are here.)**
-- [ ] Iteration 2: screenshots captured and inlined in these chapters.
+- [x] Iteration 1: private CC scaffolded, cloned by workspace-builder,
+      generation rule loaded, CRD discovery attempted. **Blocked on
+      upstream runwhen-local bugs** — see
+      [08 — Current limitations](08-current-limitations.md).
+- [ ] Iteration 2: fix upstream runwhen-local bugs (import + scope-aware
+      CRD listing), rebuild image, re-run and capture screenshots.
 - [ ] Iteration 3: prose polish, `.test/` harness for local
       `runwhen-local` container validation, migration to Option A
       (cc-catalog proxy) for production hygiene.
 
+## Known limitations discovered during validation
+
+- The workspace-builder image `0.11.0` cannot list cluster-scoped CRDs.
+  Our Crossplane Bucket CRD is cluster-scoped, so no SLXs render yet.
+  Full analysis and proposed patches are in
+  [08 — Current limitations](08-current-limitations.md).
+- The pattern (rules + templates only, delegate runtime to
+  `rw-generic-codecollection`) is otherwise fully proven end-to-end.
+
 ## Where to file feedback
 
 If something in these docs is confusing or wrong, edit the markdown