Changes

• fix(ui): write a custom telemetry range on the clock the user's computer uses
  • PR: #3482
• feat(mobile): make the on-call tab answer the questions a responder has
  • PR: #3483
• feat(telemetry): implement the LogPipeline GrokParser processor
  • PR: #3481
• Add AuthenticatedRequest to API key global permissions
  • PR: #3484
• test(mobileapp): cover the untested app, and fix what the coverage found
  • PR: #3485
• Fix Microsoft Teams webhook action authorization
  • PR: #3492
• fix(security): harden status page authentication handoff
  • PR: #3493
• fix(teams): stop answering the bot messaging endpoint with "Page not found"
  • PR: #3494
• feat(rum): let the session replay recorder explain why it is not recording
  • PR: #3495
• feat(domains): let customers reissue a Let's Encrypt certificate, once a day
  • PR: #3496
• fix(security-events): send the request Chronicle actually accepts
  • PR: #3497
• fix(tests): keep the require on the line its eslint-disable covers
  • PR: #3498
• fix(tests): drop the dotAll flag Common's es2017 target rejects
  • PR: #3499
• feat(on-call): calendar feeds for on-call shifts, with shift reminders
  • PR: #3500
• fix(migrations): renumber AddOnCallCalendarFeeds off the colliding timestamp
  • PR: #3501
• fix(e2e): bound the run and make the readiness gate mean something
  • PR: #3502
• test(Common): cover the block-permission path in ReadPermission
  • PR: #3505
• fix(ui): stop routing image srcs through Route
  • PR: #3508
• Rebuild chart event indicators as a marker rail
  • PR: #3512
• feat(permissions): give the SIEM its own role family
  • PR: #3513