Release v2.20.0

What's Changed

• Support pasted and dropped chat attachments by @ignaciojimenezr in #2307
• feat(evals): shared Steps contract [1/7] by @chelojimenez in #2899
• feat(evals): inspector server runtime for steps [2/7] by @chelojimenez in #2900
• feat(evals): API, SDK, CLI & route boundary for steps [3/7] by @chelojimenez in #2901
• [XAA Connect] Support XAA on the Connect page (MCPJam test IdP) by @Vu-John in #2888
• feat(host-compare): caniuse-style support chips, coverage, filters, footnotes by @chelojimenez in #2907
• feat(evals): step authoring & replay UI [4/7] by @chelojimenez in #2902
• feat(evals): recorder & widget interaction capture [5/7] by @chelojimenez in #2903
• [XAA] Durable IdP signing key from XAA_IDP_PRIVATE_KEY secret by @Vu-John in #2912
• feat(evals): live grading helpers + agentic-interact design [6/7] by @chelojimenez in #2904
• [XAA] Connect-page mint uses the hosted IdP issuer in hosted mode by @Vu-John in #2914
• feat(evals): dashboard & cross-host regression coverage [7/7] by @chelojimenez in #2905
• [XAA] Mint the access token on the hosted connect path by @Vu-John in #2916
• [XAA] TEMP diagnostic: log hosted authorize flags on connect by @Vu-John in #2917
• [XAA] Revert temp connect diagnostic (#2917) by @Vu-John in #2918
• feat(evals): restore dropped eval-UI redesigns (suite-redirect landing + insights/run-detail) by @chelojimenez in #2919

Full Changelog: v2.19.0...v2.20.0