What's Changed

• fix(cli): read back an environment the server was willing to write by @yashau in #25
• fix(cli): give a guard refusal its own code instead of LAUNCH_FAILED by @yashau in #24
• fix(deps): override cookie and esbuild past two advisories upstream will not release by @yashau in #26
• fix(cli): three findings from a live 2026.819.1 smoke test by @yashau in #27
• fix(ci): make the root pnpm lint and check scripts actually run by @yashau in #29
• feat(ui): add sign out and stop the idle dialog offering re-authentication by @yashau in #28
• fix(ui): card spacing, danger-zone ring, and whole-row links in the lists by @yashau in #30
• docs: stop the setup instructions assuming the reader's platform by @yashau in #31
• fix(cli): exit 126 for a non-image on Windows, and correct a docs command by @yashau in #32
• fix(cli): give an edge mitigation its own code instead of FORBIDDEN by @yashau in #33
• ci: gate the docs build on docs/**, and openapi.json on js by @yashau in #35
• feat(cli): complete a login by pasting the redirect when loopback is unreachable by @yashau in #36
• feat(cli): revoke the session on logout instead of only deleting the file by @yashau in #37
• fix(ci): stop mise run ci racing bootstrap, and itself, on a fresh tree by @yashau in #38
• feat(docs): serve the site from docs.getprick.dev, and nowhere else by @yashau in #39
• fix(ci): report the docs URL from the config, not from wrangler's log by @yashau in #40
• fix: close the actionable findings from a full security audit by @yashau in #41
• docs: comment out the winget line until Microsoft approves it by @yashau in #42 Full Changelog: v2026.819.2...v2026.901.0