- Address CVE‑2024‑39321 (GHSA‑gxrv‑wf35‑62w9) security issue
- Fix ECS OIDC/IRSA config, disable QUIC 0‑RTT, and strip interface names from IPv6
- Update docs: ACME docker‑compose typo, advanced capabilities callout, maintainers, Semaphore CI badge, keepAliveMaxTime typo