nightly-20261027

What's Changed

• chore: update LATEST.json for nightly-20261026 by @github-actions[bot] in #4193
• Settings and telemetry plumbing bundle: hub GCP project setting, cloud logging, telemetry labels by @ptone in #4190
• changelog: daily entry 2026-10-21 by @ptone in #3997
• ci: fix shellcheck 0.11 findings (SC2319, SC2329) by @ptone in #4197
• harnesses: simulate JSON decoder depth limit in Python tests (Python 3.14 runner drift) by @ptone in #4198
• docs(release-notes): weekly release notes 2026-10-19 to 2026-10-25 by @ptone in #4200
• hub: answer 404 for unknown sub-paths under /api/v1/users/{id} by @ptone in #4201
• docs: follow-through for 2026-10-25 changelog by @ptone in #4199
• docs: follow-through for 2026-10-24 changelog by @ptone in #4184
• feat(cli): scion hub delegation commands, SDK and operator docs (ptone#2132) by @ptone in #4196
• ci: optionally route fork CI jobs to the cr-ci Cloud Run runner by @ptone in #4101
• Windows: native client CLI with protected private files by @ptone in #4098
• skills: content hash v2 with pinned-hash dual-accept behind hub.skill_content_hash_v2 by @ptone in #4195
• cr-ci: runner image tools and pinned git for the primary runner; trust-boundary docs by @ptone in #4194
• docs: agent delegation revoke-all, attribution and pagination follow-up by @ptone in #4203
• refactor(doctor): reuse the computed auth info for the development credential label by @ptone in #4104
• web: dev sign-in starts from a single-use launch link by @ptone in #4094
• server: dev auth requires a loopback hub host by @ptone in #4112
• cli: add scion secret get --value; move sciontool secret get and list to scion by @ptone in #3985
• chore: update LATEST.json for nightly-20261027 by @github-actions[bot] in #4211
• ci: guard build-release.yml so it never runs on forks by @ptone in #4147
• Focus the quick switcher's search input inside the tap on phones by @ptone in #4206
• feat(hub): shared value cipher for Hub-stored backups with startup audit and policy check by @ptone in #4145
• privatefs: retry when the opened file was replaced concurrently by @ptone in #4209
• hub: redact database settings in integration config responses by @ptone in #4207
• runtimebroker: claim inbox writes with noclobber, not mkdir by @ptone in #4210
• Windows: CI test coverage, docs and release zips for the native CLI by @ptone in #4205

Full Changelog: nightly-20261026...nightly-20261027