v2.30.0rc2

What's Changed

• ci(leak-guard): allow OpenSSH key types and synthetic Team Vault test ids by @zoltanam in #219
• feat(ai): show the hosted AI money balance and each turn's cost by @zoltanam in #220
• feat(teams): add the Team Vault and SSH certificate authority by @zoltanam in #221
• ci(standalone): build with the Python version the size baseline records by @zoltanam in #222
• feat(vault): guide new users to their next vault step by @zoltanam in #223
• feat(vault): bind personal vault keys to custom servers by @zoltanam in #224
• feat(vault): resolve exposures only once the old key is gone by @zoltanam in #225
• fix(vault): keep signing after a device creates its SSH key by @zoltanam in #226
• fix(vault): clearer CLI key import, vault names and certificate errors by @zoltanam in #227
• feat(ui): Servonaut colour themes and full colour in the desktop app by @zoltanam in #228
• feat(ui): theme colours for all TUI text, and window edges that match the theme by @zoltanam in #229
• fix(ca): say SSH certificates are coming soon when the service has them off by @zoltanam in #230
• fix(ca): let the CLI carry a team SSH CA rollover through by @zoltanam in #231
• feat(vault): pick vaults, keys, teams and servers instead of typing ids by @zoltanam in #232
• feat(login): say which client and platform is asking to sign in by @zoltanam in #233
• fix(vault): show progress on slow vault actions and guide device recovery by @zoltanam in #235

Full Changelog: v2.29.0...v2.30.0rc2