Chapter 11: two points from running a national node

[adrianfako]

What changes

Adds two entries to chapter 11, each tracked in its own issue:

• Open in the architecture: whether the filter list of subject-level discovery is public (Open point: whether the filter list of subject-level discovery is public (VII.2.2, VII.2.3) #128).
• Dependencies: the Starter Kit FAIR Data Point uses its own metadata schemas (Dependency: the Starter Kit FAIR Data Point uses its own metadata schemas #129).

Both come from running the Romanian node. The entries are in alphabetical order within their group. governance_refs gains VII.2.1, VII.2.2 and VII.2.3.

Pages touched

docs/arc42/11-risks-and-technical-debt/index.md

Checklist

• Front matter is complete: owner, reviewers, status, audience, governance_refs.
• status is updated (draft → in-review when asking for approval; the reviewer sets approved and last_reviewed). Unchanged: the page stays placeholder until its owner completes it in wave 6.
• Every governance requirement this page implements is listed in governance_refs and cited with <GovRef id="…" />.
• New external sources are added to src/data/sources.json and cited with <Cite id="…" />. No new sources.
• The In short box has at most three plain-language bullets. Unchanged.
• Plain language: short sentences, active voice, governance terms used as defined.
• The first mention of each glossary term links to its glossary entry; the first use of each acronym is linked with <Acronym>.
• The page covers what arc42 asks for its section (see the recipe), or this pull request explains the departure (decision D-024).
• Open points, risks and technical debt raised here have an entry in chapter 11, and the page links each one to its entry (decision D-023).
• npm run check and npm run build pass locally (CI runs both).

Sign-off needed

• Data protection (DPO): the filter list point (Open point: whether the filter list of subject-level discovery is public (VII.2.2, VII.2.3) #128).
• Security
• Legal
• ELSI