What's Changed
- Expose retry-after in CORS Access-Control-Expose-Headers by @mcpherrinm in #8758
- ci: remediate zizmor finding by @inahga in #8768
- mtca: add generator for test CA by @jsha in #8765
- Ceremony: require configs to specify a profile URL by @aarongable in #8770
- sa: add schema for MTC operations by @jsha in #8764
Full Changelog: v0.20260526.0...v0.20260602.0