v2.9.9

What's Changed

• docs: record the 2.9.8 post-release bridge by @captainpacket in #460
• chore: advance the release provenance anchor to 2.9.8 by @captainpacket in #461
• feat: the support bundle answers what an investigation had to script by @captainpacket in #462
• feat: config backup delivery status joins the support bundle by @captainpacket in #463
• fix: move a device instead of duplicating it when Forward relabels its site by @captainpacket in #464
• feat: GUI repair for existing site-relabel duplicate pairs by @captainpacket in #465
• fix: scope reconciliation is site-aware, not just name-aware by @captainpacket in #466
• fix: pending-removal counts shown once, not duplicated per map by @captainpacket in #467
• feat: published-query signature drift - Health warning and release gate by @captainpacket in #468
• feat: config backup names its pipeline stage on failure by @captainpacket in #469
• release: ship v2.9.9 by @captainpacket in #470
• release: authorize v2.9.9 by @captainpacket in #471

Full Changelog: v2.9.8...v2.9.9