v1.26.0

• Add Connect-HaloAPI -Interactive for browser sign-in with an agent account using the authorisation code flow with PKCE, without a client secret (by @Robbie-Renada, #94).
• Automatically refresh interactive sessions and reuse the renewed token in parallel batch workers instead of signing in separately in each runspace.
• Reject redirect URI paths without a trailing slash so the configured callback matches the local listener.
• Prevent rejected refresh tokens from being reused after a new browser sign-in.
• Replace sensitive debug output across authentication, requests, responses, queries, errors, and batch processing with metadata-only diagnostics.
• Add regression coverage for interactive authentication, refresh fallback, safe debug output, and renewed-token handoff to parallel workers.