- Hide MacOS agent GUI by default for per‑user installs
- Add PAR self‑enrollment option to the Windows installer
- Fix Workload Protection eBPF register reuse and kernel cgroup tracking bugs, restoring correct packet filtering for multiple filters and containers