chore(release): v0.18.0

[fclairamb]

🤖 I have created a release beep boop

0.18.0 (2026-08-25)

Features

• Discord bot, audit log, SLO burn-rate alerts, path tracing, support inbox, status-page branding & private pages (#246) (87b33d7)

Bug Fixes

• slack: register the login callback in the prod manifest (#251) (32fae86)

---

This PR was generated with Release Please. See documentation.

[fclairamb]

Release v0.18.0

The changelog on this branch has been rewritten into human-readable prose — the generated one-liner has been expanded into 19 feature entries and 12 fixes grouped by theme. Highlights:

Discord bot — a real bot, not a webhook. Incidents become bot-owned threads that edit in place and carry acknowledge/comment buttons; org members map to Discord identities for on-call mentions; thread comments flow back onto the incident through a Gateway supervisor. Interactions are Ed25519-verified, rejecting stale and unsigned requests.

Audit log — typed events with actor metadata and a normalized source address across every session-minting path, membership change, token operation, config apply and service mutation. Redaction fails closed, failed logins are flood-controlled, retention is swept. Admin-gated audit page with family/type/actor/target/IP filters and working cursors.

SLO burn-rate alerting — multi-window alert policies; burn incidents are a distinct incident kind with their own lifecycle, templates and sweep job.

Path tracing — a pure-Go MTR-style prober traces the route when a network failure opens an incident. Pinned never-public.

Support inbox — inbound human messages from email, WhatsApp, Telegram, SMS, Slack DMs and Discord DMs, with idempotent capture, abuse ceilings and a mailbox mirror. The JMAP consumer is now safe to run more than once.

Status-page branding & private pages — per-page logo/favicon behind a white-label entitlement, password protection, webhook and Slack subscriptions.

Plus incident screenshots on a new attachment rail, acknowledgement actor surfaced everywhere, flapping made visible, check groups handled as groups, custom-domain lifecycle with grace/re-promotion, a self-monitoring watchdog, region migration with ghost detection, forced password rotation, an UptimeRobot importer, self-healing stale SSO provider links, and a broad pass making result/chart queries seek instead of scan.

No breaking changes. Full detail in CHANGELOG.md.

[fclairamb]

🤖 Created releases:

• v0.18.0

🌻