Release 3.2.28

What's Changed

• #1947 FIX release: drop fetch-tags from the build and release-notify checkouts by @tamiyasigmar in #1918
• REFACTOR Generate query params in #1920
• ADD Walk speculative reads through comprehensions and template … in #1920
• ADD update helm chart and ecs module to stategraph 3.2.27 in #1920
• ADD update northflank stategraph image 3.2.27 in #1920
• ADD Make clear that Slack notification on #hashtag-engineering is the EE release+put link to release page (not to the run, which succeeded, we don't care anymore about it) in #1920
• FIX OSS release scripts: order semver tags beside date tags in #1920
• Fix that tenant admins/user-managers (when admins/user-manager of more than 1 tenant) could erroneously be shown as Admin (installation-wide)/Manages members (installation-wide) in the UI, whereas they were not installation-wide admins/user-managers. in #1920
• 3246 fix stuck plan bugs in #1920
• ADD website: AI docs section for Claude Code and other agents in #1920
• REFACTOR Bump OCaml dependencies in #1920
• FIX docker: refresh the Debian packages of orchestration-setup and pin the pip of the checkov venv in #1920
• Add Terraform Cloud, Digger, Atlantis, Spacelift, and env0 migration guides with converters in #1920
• ADD drift: restart_on_change option for drift schedules in #1920
• FIX release: keep only the newest 5 versions in the apt and yum repositories in #1920
• FIX website: version homepage script.js and demo.js for cache busting in #1920
• ADD Adapt export report to the fact that OSS is only updated on releases. Have the report be agains the export of a PR's target branch in #1920
• FIX Fix MacOS unit tests in #1920

Full Changelog: 3.2.27...3.2.28