fix(screenshots): a second refresh run skips captures already in progress, hung-capture slot release under test
Merge: the Security Advisor says its findings in the reader's language
fix(advisor): the PHP end-of-life check follows installed packages, not leftover config directories
fix(screenshots): one shared limit on concurrent Chromium captures so previews cannot drive a server into OOM
docs: clear the demo's remaining findings and record how, with the measured memory figures
feat(security-advisor): translate the fix explanations via message keys
feat(security-advisor): translate the finding texts via message keys and parameters
docs: record the test box's new load recording and keep the watcher in the repo
docs(notes): measure the gate load and the chromium limit on the test box, and say what the data does not support
docs(changelog): add the testing pill for v2026.10.06.08
docs(whatsnew): add the translated Security Advisor findings to the What's-new buffer in 15 languages
fix(subscriptions): worker changes by a package change are audited, a new site takes the slice of its own subscription
fix(subscriptions): a package change moves the PHP worker pools and DB governor limits along, and package edits stop rebuilding other subscriptions' pools