• Merge pull request #924 from kaitranntt/kai/fix/codex-profile-raw-json-reset
• fix(cliproxy): remove dead codex reconcile settings arg
• docs(roadmap): clarify codex runtime fallback behavior
• fix(cliproxy): preserve saved codex model selections
• chore(sync): merge main into dev after release [skip ci]
• Merge pull request #921 from kaitranntt/kai/fix/914-kiro-auth-failure-reporting
• refactor(dashboard): use shared token fingerprinting for auth detection
• fix(kiro): prefer scored URL extraction for stderr manual callback
• fix(kiro): eliminate TOCTOU in token fingerprinting and harden tests
• fix(kiro): require fresh token before auth success
• Merge pull request #920 from kaitranntt/kai/fix/dashboard-remote-readonly-auth-gate
• fix(ui): keep remote read-only notice accurate
• fix(usage): block remote refresh without auth
• fix(web-server): block remote dashboard writes
• fix(dashboard): gate remote read-only auth