v0.35.0

## Changelog
* 8f0d57f6a760c0e9310fdeb801c7c0ef2b05614f deps: bump @tanstack/react-router from 1.170.10 to 1.170.15 in /web (#265)
* f28b88d1606bc041abd13830e8fcb4f60e20ffa0 deps: bump @tanstack/react-router from 1.170.8 to 1.170.10 in /web (#248)
* f38292b29b393e8b45e7086a7838b05494b2fa85 deps: bump alpine from 3.23.4 to 3.24.0 (#263)
* f269ab2ad5d15d48e439ef051e91685a7a1fea53 deps: bump github.com/infisical/go-sdk from 0.7.1 to 0.8.0 (#243)
* a842f9d5185e2049e068bd1c2aa9bf3d05062367 deps: bump github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.0 (#266)
* 54c529d8b417380d236739588876cfe751812aa0 deps: bump golang from 1.26.3-alpine to 1.26.4-alpine (#240)
* 735d53f52583a110465aeb7f6d7938f5a7429933 deps: bump golang.org/x/sync from 0.20.0 to 0.21.0 (#267)
* bca1e6ae335556e64ae5b379e9d66f5c7f2f74be deps: bump modernc.org/sqlite from 1.50.1 to 1.52.0 (#245)
* f5540d3be5b3a8f7070263bff3276c5665eb6a82 deps: bump node from `144769e` to `3ad34ca` (#264)
* 972d435c9d415e40ed52a5d781fa8e103d4052f7 deps: bump node from `79723b4` to `3fe807a` in /internal/isolation/assets (#261)
* feb6b5cd2309c0baaf50a260f543e08f04f0d270 deps: bump node from `7c6af15` to `144769e` (#241)
* 0d5f068b61b518abea481171dfd27374f48c5ebd deps: bump node from `e89172f` to `79723b4` in /internal/isolation/assets (#239)
* 39ccfdf8aca35dcf8a2360b730a44179bd79b5fc deps: bump react and @types/react in /web (#246)
* e1592032987b836e1734c87a71a9aa629c26eee4 deps: bump react-dom from 19.2.6 to 19.2.7 in /web (#244)
* d96286c906d5ad92b881060a8efd6fc277504ce9 deps: bump vite from 8.0.15 to 8.0.16 in /web (#247)
* ed9840c73dae3d7d417c22b2a42981f41c7422dc docs(readme): tighten Pluggable Credential Stores blurb
* 6dc2b795befe874bbefd4cca06df1ae42d533bed feat(infisical): support dynamic secrets as leased credentials (#268)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.35.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
```