20260929232050

What's Changed

• Feature: Scope the rack IAM policy to /convox/ and add a PermissionsBoundary parameter for rack-created roles
• Feature: Add the ApiRoleScoped rack parameter to replace PowerUserAccess on the rack API role
• Update: Reword the InstanceSecurityGroup errors for NLB preserve client IP and the gRPC success code description
• Fix: Return from build create once the build task launches, and show why a build task stopped
• Fix: Request a distinct ACM certificate on each convox certs generate and delete ACM certificates by exact id