v2.6.44 — 2026-07-25

• feat(repair): RepairSSL reconciles TLS intent against on-disk certs
• fix(nginx): heal customer vhosts referencing a missing cert on agent startup
• fix(ssl): render the vhost before requesting the cert so alias (www) ACME challenges don't 404