v0.0.35

What's Changed

• fix(web): convert /dashboards index to a client component (#4089) by @msywulak in #4092
• docs(adr): ADR-0027 — executeSQL-over-REST security model (#4047 grill) by @msywulak in #4096
• fix(web): stop stale atlas_region cookie from misrouting returning login (#4090) by @msywulak in #4093
• feat(auth): reject plus-addressed email signups except useatlas.dev by @msywulak in #4098
• feat(cli): multi-workspace selection — atlas switch + --workspace override by @msywulak in #4100
• feat(api,cli): explore REST endpoint + atlas explore (#4049) by @msywulak in #4101
• feat: runMetric REST endpoint + atlas metric run by @msywulak in #4102
• feat: executeSQL raw-SQL REST endpoint + atlas sql (#4047) by @msywulak in #4103
• feat: workspace-scoped API key for unattended CI (Better Auth apiKey) by @msywulak in #4105
• feat(cli): atlas datasource create with stdin secret capture by @msywulak in #4104
• feat: profile_datasource REST endpoint + atlas datasource profile by @msywulak in #4106
• fix(api): stamp actor_kind=api_key + re-thread atlasMode on the sibling CLI routes by @msywulak in #4108
• feat(cli): api-key credential parity on metric run / explore / datasource (#4112) by @msywulak in #4116
• fix(api): metric-run degraded-routing → 503/internal_error, not misleading 400/validation_failed (#4109) by @msywulak in #4114
• fix(api,cli): milestone #77 sibling-route consistency cleanups (#4113) by @msywulak in #4117
• refactor(types): wire-type SSOT for the REST suite (#4111) by @msywulak in #4118
• security(api): scope the workspace API key deliberately (#4110) by @msywulak in #4115

Full Changelog: v0.0.34...v0.0.35