docs: Stockbit session endpoints and the design of features on them

docs/STOCKBIT.md: every market-data endpoint in Stockbit's web client,
probed with a session on 2026-11-03 (corporate actions, shareholder
movements, composition, market detector, analyst consensus, hourly charts,
market states), the read-only rules all session features follow, and the
design of corporate actions and shareholder movements. Linked from
AGENTS.md and ROADMAP.md.

Claude-Session: https://claude.ai/code/session_01RqPPVeVDrnLoP7NUZmLRxY

ROADMAP.md

@@ -14,10 +14,14 @@ history lives in git.
 - Multi-period financial statements (today `financials` is single-period)
 - Order book depth without a login: no free source exists (IDX sells delayed
   depth to vendors); `stocks orderbook` needs the user's Stockbit login.
-- Stockbit login follow-ups: intraday OHLCV from the session's `1d` chart;
-  confirming session 1 is `STATE_NAME_SESSION_1` (session 2, `BREAK` and
-  `MARKET_CLOSED` were recorded on 2026-11-03), and when `has_foreign_bs`
-  turns on with the day's foreign figures; an
+- Corporate actions (`stocks actions`, `calendar`) and shareholder movements
+  (`ownership movements`) from the Stockbit session; design and endpoints in
+  `docs/STOCKBIT.md`.
+- Stockbit login follow-ups: hourly OHLCV from the session's `1w` chart (the
+  `1d` chart is per-minute closes only); confirming session 1 is
+  `STATE_NAME_SESSION_1` (session 2, `BREAK` and `MARKET_CLOSED` were
+  recorded on 2026-11-03), and when `has_foreign_bs` turns on with the day's
+  foreign figures; an
   opt-in daily refresh so a session outlives the refresh token's week, once
   it is known whether Stockbit caps a session's total life; and the sign-in
   response (`/login/v6/*`, read over DevTools' `Fetch`) as a second signal