v2026.11.1-alpha

Upgrade notes

• Ingest tokens use the foi_ prefix (#424), with no alias. Tokens
  starting with fo_ are rejected. After upgrading, rotate the token in
  Connect telemetry → Ingest token and update every collector; telemetry
  from a collector still using the old token is rejected until it is updated.
• Unused sign-in links issued before the upgrade stop working. Request a
  new one. Issued OAuth tokens and connected MCP clients keep working.
• Query state rebuilds on first start. The read cache moves to version 18;
  telemetry and control data are untouched. Expect slower queries until the
  rebuild finishes.
• Fixed: service-map drill-downs no longer time out or shed other reads
  under sustained ingest (#419, #423).

What's Changed

• ci: scan for secrets, session links and local paths with gitleaks by @vishr in #420
• docs: cover Explore, alerts, dashboard editing, upgrades, deployment and the CLI by @vishr in #421
• docs(site): publish the v2026.11.0-alpha benchmark by @vishr in #422
• fix(query): serve service drill-downs from the trace index by @vishr in #423
• feat(auth)!: one bearer secret format and the foi_ ingest prefix by @vishr in #424

Full Changelog: v2026.11.0-alpha...v2026.11.1-alpha