Changes

• Simplicity audit: status pages - plain choices, a first step, rules that ask what they match first, the badge in one switch
  • PR: #4986
• fix(auth): sign-in cookies stay on HTTPS, and an HTTPS installation tells browsers to stay there
  • PR: #4987
• fix(marketplace): name a bundle reference's tenant and subscription as Partner Center's schema does
  • PR: #4988
• Simplicity audit: settings and admin - plain Scope, SMTP and SSO choices, one SSO page, one Auto Recharge card, one-line role cards
  • PR: #4989
• Simplicity audit: workflows, runbooks, AI and code - one choice where help explained modes, one place per task
  • PR: #4990
• fix(push): only a server meant to relay pushes for other servers answers the push relay
  • PR: #4991
• feat(terraform): the provider repository carries the Apache License 2.0, and the provider's e2e suite runs nightly
  • PR: #4993
• fix(on-call): a layer created without a rotation or restriction times starts with the new-layer defaults
  • PR: #4995
• fix(order): a row created at a place no other row holds moves no row
  • PR: #4996
• fix(terraform): a select column the master API key's server lacks is dropped, not fatal
  • PR: #4997
• fix(terraform): a DateTime inside a JSON attribute compares as the instant it names
  • PR: #4998
• feat(mcp): list the hosted MCP server in the MCP Registry at each release, and guard the tool annotations directories require
  • PR: #4994
• docs(terraform): the on-call schedule layer page shows the JSON shapes of rotation and restriction times
  • PR: #4999
• feat(mcp): every tool that changes something says it is destructive, and every tool states all three hints
  • PR: #5000
• Release 14.0.73 (gate - do not merge)
  • PR: #4992