v0.2.6

What's Changed

• [WIP] Landing page refresh by @josh-collinsworth in #635
• Another LP pass by @josh-collinsworth in #636
• refactor: decouple llm approver summaries by @magurotuna in #638
• Pre-launch checkup by @josh-collinsworth in #639
• tailscale tunnel: OAuth-client auth via oauth_client_secret by @piscisaureus in #641
• fix: honor wireguard.listen_port instead of silently ignoring it (cl-94cf) by @arnauorriols in #646
• aws_credential: re-sign non-EKS proxied requests + inject placeholder AWS env vars by @arnauorriols in #644
• feat: profile-scoped endpoint/credential discovery endpoint by @arnauorriols in #645
• gateway: handle tsnet exit-node UDP via GetUDPHandlerForFlow by @piscisaureus in #643
• gateway: advertise dnsvip CIDRs as Tailscale subnet routes by @piscisaureus in #654

Full Changelog: v0.2.5...v0.2.6