- Add POST /feedback anonymous GitHub issue proxy
- Wire feedback rate-limiter to Redis cache
- Replace process-wide bucket with shared api-core middleware (#106)
- Adopt authz-client v0.2.0 for canonical user IDs
- Refresh interval
- Add app-card-status per-service record type and endpoints
- Adopt audit-fields convention on banners and maintenance modes
- Exclude expired records from active filter
- Remove legacy X-Internal-Service-Token fallback from write routes
- Fix Deployment fields that never matched ArgoCD's applied manifest
- Enable Stakater reloader for Prometheus metrics
- Add MongoDB connection config to local overlay
- Authorize write routes on forwarded user token, not shared secret
- Gate continuous profiling behind the profiling-enabled feature flag
- Add slog-gin for JSON HTTP access logging
- Add slog-gin JSON HTTP access logging
- Document slog-gin JSON HTTP logging
- Scope AtlasDatabaseUser role to sweetrpg-admin
- Authenticate AtlasDatabaseUser against admin, not app db
- Version-prefixed Ingress paths with a latest-alias Service
- Point readinessProbe at /status/ping, not /status/health
- Widen readinessProbe timeout margin above Mongo's worst case
- Target DB_PASSWORD explicitly in the admin-api-db rewrite
- Remove startup log dump of the full process environment
- Add Atlas user manifest
- Point atlas-db-password ExternalSecrets at new Akeyless path/key
- Connect via admin-api's own Atlas database user
- Add maintenance-mode resource
- Point local overlay at the shared local MongoDB
- Require internal-service write auth and audit writes (#12)
- Point local overlay at the shared local MongoDB
- Wire api-core.go tracing, health checks, and logging
- Add BannerMessage model with validation and TTL index
- Add banner CRUD and scoped query API
- Add include_inactive param for admin listing (#2)
- Add overlays/local for the Tailscale operator (#6)
- Include models/ in swag doc generation
- Don't fail go-docs when generated docs are unchanged
- Add missing dev ingress (#3)
- Fold overlays/local into the shared path-based scheme (#7)
- Release automation via git-cliff and the shared Go release workflows.