v0.4.3

What's Changed

• docs: verify release images against the release-image.yml signer by @Yoshiofthewire in #47
• Polish KyRecovery interface while preserving controls and settings by @Yoshiofthewire in #50
• fix: secure compose defaults, stop printing credentials, report IdP errors; quick start by @Yoshiofthewire in #49
• docs: clarify standalone installation and test coverage by @Yoshiofthewire in #51
• Shorten README and organize documentation by topic by @Yoshiofthewire in #52
• feat: rotate the suite recovery key by @Yoshiofthewire in #53
• fix: launch-video bugs in restore plan, rotation refusal and dashboard copy by @Yoshiofthewire in #54
• Write the generated admin password to a file, not the log by @Yoshiofthewire in #55
• chore(ci): bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 in the actions group by @dependabot[bot] in #56
• chore(release): 0.4.3 by @Yoshiofthewire in #57
• Release Dependabot changes daily as vX.Y.Z.N by @Yoshiofthewire in #58
• build: Go 1.27.3 for GO-2026-6809; pin base images by @Yoshiofthewire in #59

Full Changelog: v0.4.2...v0.4.3