M6: shell completions with dynamic alias lookup

Add ValidArgsFunction to mount and unmount commands that reads config
aliases for tab completion. Install zsh, bash, and fish completion
scripts via flake postInstall. Update PLAN.md with post-1.0 roadmap.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cmd/unmount.go

@@ -10,11 +10,12 @@ import (
 )
 
 var unmountCmd = &cobra.Command{
-	Use:     "unmount <device|alias>",
-	Aliases: []string{"umount"},
-	Short:   "Unmount and lock a LUKS volume",
-	Args:    cobra.ExactArgs(1),
-	RunE:    runUnmount,
+	Use:               "unmount <device|alias>",
+	Aliases:           []string{"umount"},
+	Short:             "Unmount and lock a LUKS volume",
+	Args:              cobra.ExactArgs(1),
+	RunE:              runUnmount,
+	ValidArgsFunction: completeDeviceOrAlias,
 }
 
 func init() {