v0.165.7

What's Changed

• fix: make many-to-one aws sm sync only target one secret by @mathnogueira in #7999
• chore: add upgrade impact for v0.165.6 by @github-actions[bot] in #8004
• docs(platform): additional screenshot pass by @adkah in #7997
• improvement(frontend): reduce mobile padding on overview and dashboard pages by @claude[bot] in #8005
• feat: allow one LDAP connection to back many Linux and Windows syncs by @carlosmonastyrski in #7867
• fix: coalesce concurrent secret reference folder loads by @maidul98 in #8011
• fix: split query into 3 ones to reduce duplicate alloc by joins by @mathnogueira in #8012
• improvement(audit-log): tag stale-claim drops with stream provider by @victorvhs017 in #8001
• fix(app-connections): standardize add sheet discard handling by @andrewhuhh in #7942
• improvement(approvals): add create-policy CTA to change requests empty state when no policies exist by @claude[bot] in #8008
• fix(frontend): match secret row hover actions to standard ghost icon buttons by @claude[bot] in #8020
• feat(pam): break-glass for access requests by @lb-vn in #7930

Full Changelog: v0.165.6...v0.165.7