docs(wiki): DT-008 phantom-scan diagnosis + backfill bypass/relay-test concept pages

Two independent wiki updates bundled (all docs):

1. dingtian-dt008-reader.md: phantom optical decodes on the park-buzi EXIT
   reader (empty pre-opening site, low-sun afternoons). Chain of evidence:
   READ log lines carry the reader's own serial (H05MA5B0) → physical device,
   not a network source; snapshot shows nobody present; code shapes are the
   giveaway (6-digit numerics = checksum-less Interleaved 2-of-5, lone "C" =
   Code39/Codabar artifact) → 1D engine decoding sun-made stripe patterns
   (striped arm, fence shadows, glare). No fraud exposure (11-digit Luhn ids
   can't match); noise only. Fix on the entity page: vendor-tool symbology cut
   to QR+Code128 + min decode length, BOTH readers; config lives ON the device
   → re-apply after any factory reset/swap. Deliberately NOT filtering
   impossible codes server-side — probe recording is the anomaly path's job.

2. Backfilled two shipped-but-undocumented features (six code files already
   linked the first page as if it existed):
   - concepts/entry-presence-bypass.md — admin drops a FAULTY presence signal
     (granular radar/camera by decision, not a master switch); every flip is a
     signed config_change; persists till off; tickets stamped presenceBypassed;
     radar-bypass cooldown tradeoff; "the admin is not the adversary, but
     trusted never means invisible".
   - concepts/setup-relay-test.md — admin-only commissioning pulse, signed
     barrier_open_command BEFORE the fire so a test open never reads as the
     out-of-band-open fraud signal; saved controllers/declared relays only;
     radarAlert lamps excluded; pulseOpen only.
   Cross-linked from operator-issued-entry.md, cataloged in index.md, logged.

Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V

wiki/concepts/operator-issued-entry.md

@@ -2,7 +2,7 @@
 type: concept
 tags: [parking, booth, entry, threat-model, anpr, presence]
 sources: []
-updated: 2026-07-01
+updated: 2026-07-04
 status: settled
 ---
 
@@ -33,6 +33,11 @@ with phantom tickets, and (crucially) it guarantees the entry snapshot captures
 what [[plate-reconciliation]] reads at exit. **No presence loop configured → the feature is
 unavailable** at that site (we require both; no weaker camera-only fallback).
 
+> **Bypass (2026-07-02):** when one of the two devices is FAULTY, the admin can drop that signal
+> as a requirement via [[entry-presence-bypass]] (granular, signed `config_change`, persists till
+> turned off). The gate then requires only the still-working signal; tickets minted under a bypass
+> carry `presenceBypassed` on the signed entry, and refusal anomalies record it too.
+
 **Enforced on BOTH sides.** The UI only enables the entry [[booth-console|BarrierLight]] as a clickable
 issue-control when `radar.entry && lanes.entry` (both true) and the operator holds `session:create`.
 The **server re-checks** current presence (`LaneStatus.snapshot().entry === true` AND the entry relay's