v2026.08.18.3 – v2026.08.19.05 — 2026-08-19

• fix(agent): self-heal orphaned per-customer PHP-FPM template instances
• i18n(review): kick off native translation review — per-language workbooks + safe re-import
• feat(agent): key-only SSH hardening — disable password auth once a key is present
• fix(agent): SSH key-only drop-in must win over cloud-init + not touch root policy
• fix(agent): mask always-failing no-op unbound-resolvconf helper
• fix(agent): unbound-resolvconf mask must trigger on failed-state, not resolvconf presence