Changes

• feat(recommendations): rebuild the page, the side menu and the create progress
  • PR: #3574
• feat(monitor): add Database Health monitor for PostgreSQL, MySQL and SQL Server
  • PR: #3577
• test(ai-chat): lock the per-user pin on Ask AI conversations (#3554)
  • PR: #3573
• fix(identity): expire password reset links when an account's email changes
  • PR: #3571
• fix(dashboard): gate the dashboard editor on the permission its save needs
  • PR: #3572
• fix(threat-intel): send a descriptive User-Agent on outbound feed and data-source requests
  • PR: #3569
• fix(ai-chat): freeze the page behind the Ask AI panel
  • PR: #3570
• [Snyk] Security upgrade js-yaml from 4.3.1 to 4.3.2
  • PR: #3579
• [Snyk] Security upgrade js-yaml from 4.2.0 to 4.3.2
  • PR: #3578
• fix(enterprise-license): deactivate silent instances after one week
  • PR: #3576
• Choose parent Network Site Types instead of hierarchy positions
  • PR: #3575
• fix(security): keep password reset tokens out of third-party analytics
  • PR: #3580
• fix(ask-ai): stop the incidents-list prompt under-claiming query_incidents
  • PR: #3581
• Make monitor-backed network devices first-class: optional binding, honest counts, one-step Ping monitors
  • PR: #3582
• fix(status-page): store the invite reset token hashed, not raw
  • PR: #3586
• feat(telemetry): classify faults so user errors stop becoming Issues
  • PR: #3584
• feat(notifications): roll up owner email bursts into one message
  • PR: #3587
• fix(container-agents): detect severity in Monolog and zap log lines
  • PR: #3590
• Ping every network device by default; SNMP becomes an upgrade, alerting becomes a policy
  • PR: #3594