v2026.10.05.11 – v2026.10.06.02 — 2026-10-06

• fix(lint): US spelling in the mail-host cert test
• docs(changelog): regenerate the testing index for v2026.10.05.10
• fix(mail): a dedicated mail server can finally get a certificate for its hostname
• fix(security): the posture snapshot sweep stopped before its first customer
• fix(lint): US spelling in the new certificate tests
• fix(tls): the TLS health report judges the certificate it actually fetched
• fix(ssl): a wildcard certificate counts for the names it covers
• fix(nginx): the HTTPS catch-all covers HTTP/3 too, so an unserved name stops leaking a customer's certificate