2.8.0rc4

What's Changed

• [2.8] Restore devops examples under examples/devops by @pcnudde in #4681
• [2.8] Update multi-study documentation links by @chesterxgchen in #4685
• [2.8] Don't use kagglehub==1.0.1 (#4692) by @chesterxgchen in #4698
• [2.8] cert: make project_profile.yaml server.admin_port optional by @chesterxgchen in #4699
• [2.8] Fix CLI docs: provisioning paths, admin_port, K8s status, ephemeral_storage by @chesterxgchen in #4694
• [2.8] Fix monitoring pair duration after missing end event by @chesterxgchen in #4696
• [2.8] Fix recipe docs examples by @YuanTingHsieh in #4693
• [2.8]: Make image option of dashboard cli mandatory by @IsaacYangSLA in #4706
• [2.8] Simplify Docker runtime image by @pcnudde in #4709
• [2.8]: cherry-pick PR 4684 and 4704 Improve security by loading classes in allow_list only by @IsaacYangSLA in #4701
• [2.8] Fix finished download ref retry handling by @chesterxgchen in #4708
• [2.8] Validate client API launcher resend settings by @chesterxgchen in #4710
• [2.8] Fix FOBS externalizer shared-state race by @nvidianz in #4707
• [2.8] Avoid duplicate timeout validation by @chesterxgchen in #4716
• [2.8] Update 2.8 docs for large-model streaming reliability by @chesterxgchen in #4714

Full Changelog: 2.8.0rc3...2.8.0rc4