v4.3.4

Changelog

• feat: Add --all-tenants to override configured tenant filtering and select across tenants accessible to the authenticated user. #282
• feat: Clarify tenant scope and warn about cross-tenant mutations, including affected tenants before ops confirmation and execution. #283 #295
• fix: Make process-definition ordering deterministic and select --latest independently for each tenant and BPMN process ID. #286
• fix: Prevent false cancellation timeouts when process instances complete or disappear during cancellation and forced cleanup. #294
• fix: Align operational progress with completed work and the actual stages of forced process-definition cleanup. #285 #291
• fix: Send confirmation and paging prompts to stderr so redirected results and key pipelines remain usable. #298
• fix: Preserve JSON and keys-only contracts when selector-based process-instance cancellation or deletion finds no matches. #299
• fix: Preserve structured JSON errors for command validation and runtime failures on commands supporting the shared contract. #301
• fix: Make tenant diagnostics for selector-based process-instance cancellation and deletion respect configured log formats and levels. #303
• docs: Simplify command help around operations and correct resource-key, profile, incident-purge, and retention-pipeline examples.