Portal v0.52.0 — Clearer MFA and dependency updates

MFA setup and Profile now have a clearer layout, consistent actions, and recovery-code management that is easier to follow. This release also refreshes dependencies. Runner v0.31.0 accompanies this release.

Console

• Reworked MFA setup and Profile security settings, including sign-out, enabled/disabled states, authenticator verification, and recovery-code flows.
• Pack reporting says which runners reported the exact pack content, without repeating counts or showing an empty-state tooltip.
• Shorter service-account guidance and workspace labels that show the slug rather than an internal routing prefix.

Security

• Updated eligible Go and Hex dependencies and the Debian security snapshot, including the Perl security fix.
• Update the Symbolicator pack to 0.2.6. Earlier versions are retired and cannot dispatch actions. Cleanup preview is medium risk: the vendor's dry run preserves expired cache entries, but can create cache directories or remove invalid or unreadable metadata sidecars.

Runner and packs

• Runner v0.31.0 updates its runtime dependency and remains independently versioned from Portal and MCP Bridge.
• Updated pack compatibility fixtures without dropping previous supported families; added MongoDB 8.3, Kubernetes 1.37, ClickHouse 26.9, and Symbolicator 26.9.
• Symbolicator cleanup coverage proves preview preservation and selective deletion using real cache files, and keeps older-version byte totals distinct from newer-version progress output.
• Cloud Logging continuations keep the original query fixed across pages.

Platform

• Updated eligible Terraform providers, container images, runtime helpers, and build tooling. Versions still inside the release-age window remain pinned.