Release notes

This is a security release. It adds service accounts (atgsa- keys), stores personal and system keys as hashes only, locks force actions after repeated failures, and adds a security events API, login rate limits, key-expiry notices with in-console messages, and deprecation headers on the legacy API

Security hardening

CLI API v2 (/api/v1), security hardening, unauth user-API fix

Maintenance release.