Live sync KV stores over Iroh

docs/roadmap.md

@@ -264,6 +264,11 @@ authorization and durable-state boundaries clear.
   - `[x]` Tests cover allowed and denied prefix-scoped KV write explanations.
   - `[x]` `geth kv set --subject <principal>` enforces local capability
     decisions for non-local test callers.
+  - `[x]` `geth kv sync <node-id> <name>` pulls authorized updates from an
+    imported peer over Iroh.
+  - `[x]` Remote KV sync requires `kv.read` on `resource:kv:<name>`.
+  - `[x]` Background live-sync refreshes local KV stores from known peers using
+    per-peer/per-KV high-water cursors.
   - `[ ]` KV metadata is replicated through Iroh Documents.
 
 - `[~]` Iroh-gossip pubsub integration.