nightly-20261026

What's Changed

• chore: update LATEST.json for nightly-20261025 by @github-actions[bot] in #4175
• runtimebroker: check the hub-project state dir in a forced move's rollback delete by @ptone in #4159
• Admin Server Config: show the value in effect for env-overridden keys by @ptone in #4165
• conduit tests: report which session ended when a close-code assertion fails by @ptone in #4173
• hub: refuse user delete with user_delete_blocked, list blockers, sweep delegator edges by @ptone in #4157
• feat(hub): sign capability URLs, artifact views, list cursors and attachment deliveries with the signing ring by @ptone in #4139
• auth: admit direct user provisioning for tokens through hub evidence by @ptone in #4178
• Mount repository git metadata read-only into agents by @ptone in #4160
• project storage phase 3: one server.project_storage block, hub/broker layout identity check, homes on one share by @ptone in #4177
• hub: move a broker reservation atomically on a forward move by @ptone in #4181
• feat(hub): revoke all agent delegation grants, and end-to-end delegation scenarios (ptone#2132) by @ptone in #4182
• fix(agent): never assert on a nil GitHub resolution flight result by @ptone in #4183
• hub: read collected resource files through the collected root by @ptone in #4176
• feat(cli,web): show the authorizing user on delegated messages (ptone#2132) by @ptone in #4185
• Artifacts web: review editor for Markdown artifacts (phase 1) by @ptone in #4187
• cr-ci: idle-runner timeout, patched lint in the runner image, reconcile hardening by @ptone in #4070
• Settings follow-ups: correctness edge cases in hub operational settings and the settings API by @ptone in #4188
• hub: agent status and launch-record writes by @ptone in #4191
• pkg/hub: prepare the web chat stores for their move to pkg/hub/webchat by @ptone in #4192
• web: project Visitors tab and per-issuer visitor access switch by @ptone in #4189

Full Changelog: nightly-20261025...nightly-20261026