- Added new gateway UI to display PAM resources, support restricting to gateway pools, introduced event class toggles, JKS output for PKI, and CLI init project ID flag
- Implemented several bug fixes: validation rules for moving secrets/folders, 401 on expired sessions, SMB min protocol version, PKI connection validation, UI layout adjustments, and added e2e test for DB sanitization
- Updated documentation for agent vault (OpenClaw guide, variables guide) and CLI, and migrated KMS export, rotation notices, encrypt/decrypt controls, and secret‑scanning UI to v3