docs: Update README and TODO with project documentation

TODO.md

@@ -58,12 +58,13 @@
 - [ ] Bracket visualization
 
 ### Implementation Phases
-- [ ] Phase 1: Navigation & Layout (Week 1)
-- [ ] Phase 2: Player Profile Enhancements (Week 1-2)
-- [ ] Phase 3: Tournament Admin View (Week 2-3)
-- [ ] Phase 4: Club Admin View (Week 3-4)
-- [ ] Phase 5: Player Schedule View (Week 4)
-- [ ] Phase 6: Polish & Testing (Week 5)
+- [x] Phase 1: Navigation & Layout (Week 1)
+- [x] Phase 2: Player Profile Enhancements (Week 1-2)
+- [x] Phase 3: Tournament Admin View (Week 2-3)
+- [x] Phase 4: Club Admin View (Week 3-4)
+- [x] Phase 5: Player Schedule View (Week 4)
+- [ ] Phase 6: Authentication & Authorization (Week 5)
+- [ ] Phase 7: Polish & Testing (Week 6)
 
 ## Future Enhancements
 
@@ -84,28 +85,34 @@
 ## AAA System (Authentication, Authorization, Accounting)
 
 ### Authentication
-- [x] Create users table migration (db/migrate/20240915000008_create_users.rb)
-- [x] Create users repository (app/repositories/users.rb)
-- [x] Create users model/struct (lib/euchre_camp/entities/user.rb)
-- [x] Build login page template (app/templates/auth/login.html.erb)
-- [x] Build login action (app/actions/auth/login.rb)
-- [x] Build logout action (app/actions/auth/logout.rb)
+- [x] Create users table migration
+- [x] Create users repository
+- [x] Create users model/struct
+- [x] Build login page template
+- [x] Build login action
+- [x] Build logout action
 - [x] Add login/logout routes
 - [x] Add BCrypt to Gemfile
-- [x] Install BCrypt (bundle install)
-- [x] Update base Action with authentication helpers
-- [x] Add current_player to views
+- [x] Install BCrypt
+- [x] Create authorization service
+- [x] Add authorization helpers to base action
+- [x] Add role-based access control
 - [ ] Create registration action and template
 - [ ] Add session management middleware
+- [ ] Add current_user helper to views
 - [ ] Password reset functionality
 - [ ] Email confirmation system
 
 ### Authorization
-- [ ] Define roles (player, tournament_admin, club_admin, system_admin)
-- [ ] Implement RBAC middleware
+- [x] Define roles (player, tournament_admin, club_admin, system_admin)
+- [x] Create Authorization service
+- [x] Implement permission checks
+- [x] Add authorization to admin dashboard
+- [x] Add authorization to player management
+- [x] Add authorization to tournament management
+- [x] Add 5-minute match edit window
 - [ ] Add role assignment UI
-- [ ] Protect routes based on permissions
-- [ ] Permission checks in actions
+- [ ] Add permission checks to all routes
 
 ### Accounting
 - [ ] Create activity logging system