v1.6.1

What's Changed

• [docs] roadmap: backup/DR, drift detection, GitOps, federation, secrets by @malickyeu in #166
• [docs] release/vX.Y.Z branch holds the dev cycle, not main by @malickyeu in #172
• [docs] dependabot PRs stay targeted at main by @malickyeu in #173
• [docs] correct main's protection is a ruleset, note auto-merge by @malickyeu in #174
• [add] pin Compose plugin versions in the compat matrix by @malickyeu in #167
• [add] collapsible sidebar groups by @malickyeu in #168
• [add] Windows native service via windows/svc by @malickyeu in #169
• build(deps): bump the npm-minor-patch group in /web with 5 updates by @dependabot[bot] in #170
• build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the actions group by @dependabot[bot] in #171
• [docs] make git-workflow a two-checkpoint gate, not just prose by @malickyeu in #175
• [fix] Windows service: reinstall ordering, honest stop-timeout, smoke-test bug by @malickyeu in #176
• [add] pin Engine patch versions in the compat matrix by @malickyeu in #178
• [add] bulk restart/stop for containers by @malickyeu in #179
• [add] compose profiles: deployed-vs-selected state + badges by @malickyeu in #180
• [add] MCP restart_stack_containers / stop_stack_containers by @malickyeu in #181
• [fix] audit failed bulk container actions, not just successes by @malickyeu in #182
• [fix] neutralize COMPOSE_PROFILES leak, log swallowed persist error by @malickyeu in #183
• [docs] roadmap: image update lifecycle, project secrets, self-update policy by @malickyeu in #177
• [add] bulk start + bulk pull for containers by @malickyeu in #184
• [fix] compat workflow: no raw shell interpolation, verified compose download by @malickyeu in #185
• [fix] MCP: charge whole-stack actions per container, atomically by @malickyeu in #186
• [fix] Windows service: locked-down data dir ACL, honest stop, dual-install guard by @malickyeu in #187
• [fix] normalize compose profiles once, before persist/audit/deploy by @malickyeu in #188
• [docs] re-shoot containers screenshot with bulk-select checkboxes by @malickyeu in #189
• [fix] scope session query token to WS upgrade, lock dev CORS, fix known_hosts hostname by @malickyeu in #190
• Release v1.6.1 by @malickyeu in #191

Full Changelog: v1.6.0...v1.6.1