v3.4.0

What's Changed

• replica: depend on the current sdk-services by @samgbafa in #667
• Fail the hosted MCP deploy unless the CVM runs the pinned production OS image by @samgbafa in #673
• TC-1785: short-lived authority for delegation revoke by @samgbafa in #671
• feat(share-sdk): add web-recipient subpath for web-sdk by @samgbafa in #678
• size policy: the newest root ceiling is the only active one by @samgbafa in #684
• web-sdk: replication wiring in its own module (TC-1777) by @samgbafa in #686
• web-sdk: carry expiryMs from requestPermissions into the step-up delegation by @samgbafa in #668
• changeset: link the replica pin note to its ticket by @samgbafa in #688

Full Changelog: v3.3.1...v3.4.0