v1.8.0rc3

What's Changed

• fix(executor): mask requirements logging in-process instead of cat by @rajatoss in #19641
• fix(executor): route runner log echo through stdlib logging by @rajatoss in #19642
• fix(executor): fail-closed masking at every publish choke point by @rajatoss in #19643
• ci(release): surface docker-unified URL in the cut-tag summary by @anshbansal in #19646

Full Changelog: v1.8.0rc2...v1.8.0rc3