Rackpad 1.9.0-beta.3

This beta adds Glances and PatchMon to the explicit
inventory adoption, bindings, latest readings and opt-in monitor/polling workflow.
V2 agents and automation remain deferred. Earlier batches retain separate notes.

Glances requires API v4. Configure the server root (including any reverse-proxy
prefix), then choose Basic credentials, an existing bearer token using API key
mode (a pre-issued JWT that may expire and must be replaced manually; Rackpad
never posts to /token), or explicitly choose authentication None for anonymous access. Basic is the
default. Anonymous connections store no auth ID or secret. The adapter reads system
identity and individual CPU, memory, filesystem, network and sensor plugins, never
process lists or the broad /all endpoint. Missing optional plugins and ambiguous
sensor identities produce warnings. Metrics have unknown health because this
adapter does not invent alert thresholds. One stable host record per connection
preserves adoption and bindings across hostname changes.

PatchMon requires scoped Integration API credentials (Token Key/Token Secret,
Key/secret mode) with host:get. The adapter reads /api/v1/api/hosts with inline
stats: inventory, package/security update counts, package total, reporting state
and reboot requirement when present. It never enrols hosts, schedules patches,
reads queues or mutates the provider. Partial/paginated lists are rejected rather
than silently omitting inventory. Pending, inactive and stale reports stay unknown.
Agent observation timestamps are retained. The shared freshness limit is the
larger of five minutes and three polling intervals. At the default 60-second
interval, a PatchMon agent report older than five minutes stays unknown even
after a successful poll; choose a compatible interval for slower agent reports.
Current reports with outstanding
updates are degraded, requiring the existing separate alert opt-in.

Schema is 61; this batch adds no migration or telemetry history. Backups retain
new provider/auth identifiers and bounded adapter warnings in the connection
summary. Use a matching pre-upgrade database/configuration/key snapshot for
rollback; older executables do not understand these new provider identifiers.

Checks include disposable database regressions and real container Glances
Basic/JWT plus Kuma API acceptance. Physical-host Glances and real PatchMon
installation acceptance remain separate. Before publication complete
exact committed CodeQL approval, full MCP/browser and screenshot gates, Net-SNMP
interoperability, Linux storage/user checks, hosted security/quality gates and
AMD64/ARM64 install, immediately-previous-published-image upgrade, persistence,
restart and paired rollback. Verify revision/digests before announcing availability.