v2.6.33 – v2.6.34 — 2026-07-24

• feat(idn): punycode IDN names at the TLS/nginx boundary
• fix(agent): self-heal a missing panel cert so nginx never breaks globally