wifi: add WPA2 AP setup API and pairing roadmap

docs/roadmap.md

@@ -60,3 +60,46 @@ UI direction:
 - Dashboard alert sounds
 - More vehicle PIDs
 - Historical charts
+
+
+## AP Security, OLED Setup, and Dashboard Pairing
+
+### Phase 1 — Cargo AP security
+
+- Require WPA2 on the Cargo ESP32 AP.
+- Generate a unique AP password on first boot.
+- Store AP SSID/password in Preferences.
+- Add /api/v1/config/ap for AP configuration.
+- Add AP auth/SSID metadata to status responses.
+- Do not expose AP password in API responses.
+
+### Phase 2 — Cargo OLED setup display
+
+- Add 128x64 SSD1306 OLED support on the Cargo ESP32.
+- Show AP SSID/password/IP during first boot and setup mode.
+- Show critical operational state during normal operation:
+  - SOC
+  - voltage/current
+  - relay state
+  - WiFi/IP
+  - alarms
+- Add setup/status button:
+  - short press cycles pages
+  - long press shows AP credentials
+  - extended hold enters recovery/reset mode
+
+### Phase 3 — Dashboard credential migration
+
+- Dashboard ESP32-S3 connects as a client to the Cargo ESP AP.
+- Cargo ESP remains the network/configuration authority.
+- When AP credentials are changed from the phone WebUI, Cargo stages the new credentials.
+- Dashboard fetches and saves pending credentials before Cargo restarts AP.
+- Cargo applies the new AP settings.
+- Dashboard reconnects automatically.
+- Temporary dashboard setup AP is fallback/recovery only.
+
+### Phase 4 — User-friendly setup polish
+
+- Add QR code display for joining Cargo AP.
+- Add dashboard settings UI.
+- Add LVGL on-screen keyboard only after core dashboard functionality is stable.