v2026.10.02.06 — 2026-10-02

• fix(ui): hide mail controls the package forbids, link the changelog from the banner, repair two page titles
• fix(sites): enforce the SSH package permission — the toggle actually granted a shell