v0.6.16

What's Changed

• Custom Python connectors: captures, derivations, and materializations as Python projects by @jgraettinger in #3660
• Prefix-scoped token updates by @GregorShear in #3684
• ci: scan every lockfile on every pull request by @skord in #3678
• Rename capability tokens to restricted tokens by @GregorShear in #3689
• Rename prefix_scope to prefix_mask by @GregorShear in #3693
• Mint prefix-masked access tokens by @GregorShear in #3688
• Check tenant legal consent query and record consent mutation by @GregorShear in #3687
• python connectors: module-file generation fix, and flow-connector-init pin bump by @jgraettinger in #3685
• Move gazette into go/gazette within the single Go module by @jgraettinger in #3692
• migrate: resolve data-planes through Snapshot by @jgraettinger in #3696
• dekaf: format field encoding error context only on failure by @williamhbaker in #3698
• Remove dataplane grant RLS authz workaround by @GregorShear in #3686
• billing: record and expose the tenant billing plan by @jshearer in #3609
• Require legal consent before sandboxCreate mutation by @GregorShear in #3699
• agent: tenant controllers start free trials from Bigtable stats by @jshearer in #3606
• deps: bump Go modules and refresh Cargo.lock by @jgraettinger in #3701
• agent: tenant controllers evaluate trial and payment method alerts by @jshearer in #3654
• discovers: disable new bindings by default for existing captures by @jshearer in #3713
• Look up sandbox commands by ID by @GregorShear in #3705
• Block tenants from using sandbox features by @GregorShear in #3704
• ci: attach an SBOM to every platform image by @skord in #3691
• billing: calculate and freeze invoices in Rust by @jshearer in #3681
• notifications: remove stalled-trial emails by @jshearer in #3717
• agent: fix stalled-trial email test by @jshearer in #3718
• runtime: accept unpadded private data-plane FQDNs in Plane() by @dgreer-dev in #3720
• flowctl: add raw graphql and raw graphql-schema by @jgraettinger in #3702
• feat: daemon for journal-backed disks by @williamhbaker in #3700
• Fix flowctl-go's runtime libsnappy dependency, and smoke-test image binaries by @jgraettinger in #3719

Full Changelog: v0.6.15...v0.6.16