docs: mark hub + club/stats/staff migrated in authority matrix

docs/PRODUCTION_AUTHORITY_MATRIX.md

@@ -107,12 +107,14 @@ Aux + non-economy target owners: confirmed via HostSourceMap/PythonContractMap/A
 DONE (Rust-owned in candidate source; committed on top of 5020137; workspace tests green):
 - Content gap: consumable+staff emit (20 instances / 18 defs; verified real-profile re-import 1962+20).
 - Non-economy routes migrated to Rust: user/accountinfo, settings, leaderboards/options,
-  match/reset, phishing/{trusteddevice,question,validate}, club/stats/staff.
+  match/reset, phishing/{trusteddevice,question,validate}, club/stats/staff, hub.
+  (hub clubPlayers = owned player count from Core; may be < Python profile count by the deferred
+  Legend instances = DIFFERENT-BY-DESIGN.)
 - Reachability reporter (scripts/openfut-reachability.py) gates Python-hit invariants.
 
 RESIDUAL PYTHON (still proxied; concrete status):
-- hub, club/stats/{year,consumables} — Core-derived aggregation; NOT yet migrated (design: host
-  all_owned() rating-tier + market/pile counts; needs differential). Actionable, off-production.
+- club/stats/{year,consumables} — Core-derived rating-tier + consumable aggregation; NOT yet
+  migrated (design: host all_owned() tiered counts; needs differential). Actionable, off-production.
 - account/sync — persona select + save; no direct Core route; needs host session/account logic.
 - clientdata/userHubData — BLOCKED as clean migration: Core /settings supports only 2 fixed keys
   (difficulty, preferred_formation), cannot store an arbitrary blob without a frozen-Core change or