v0.165.1

## What's Changed
* feat(pki): windows/linux PKI Syns pre-fetch commands by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7694
* fix: make approvals check for validation rules by @mathnogueira in https://github.com/Infisical/infisical/pull/7837
* feat(pki): expose the latest renewal of a certificate so agents can follow renewals by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7820
* chore: add upgrade impact for v0.164.1 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7840
* docs: fix grammar in dynamic secrets overview by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7847
* fix(ui): reset search input when user gets into folder by @adilsitos in https://github.com/Infisical/infisical/pull/7844
* docs: linux and windows doc improvements by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7846
* improvement: add port number to Splunk provider by @Thiago-AS in https://github.com/Infisical/infisical/pull/7843
* fix: add blocks for ca incompatibility by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7848
* docs: add AI agent identities to identity counting by @0xArshdeep in https://github.com/Infisical/infisical/pull/7845
* feat(permissions): folder rbac by @adilsitos in https://github.com/Infisical/infisical/pull/7762
* fix(kubernetes-auth): pin direct API requests with safeRequest by @victorvhs017 in https://github.com/Infisical/infisical/pull/7855
* feat(pki-sync): add GCP Certificate Manager Sync by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7737
* fix(docs): route vulnerability reports through the disclosure policy by @Vligai in https://github.com/Infisical/infisical/pull/7856
* fix(auth): pool https agents and fix gateway sni by @victorvhs017 in https://github.com/Infisical/infisical/pull/7857
* feat(webhooks): approval and change request webhook events by @lobocv in https://github.com/Infisical/infisical/pull/7780
* docs(wip): top level ia 2 by @adkah in https://github.com/Infisical/infisical/pull/7830
* docs(secret-rotation): fix typos by @adkah in https://github.com/Infisical/infisical/pull/7861
* feat(pam): default ssh access to interactive shell by @lb-vn in https://github.com/Infisical/infisical/pull/7838
* feat(pam): improve error code for deleting discovery cred acc by @lb-vn in https://github.com/Infisical/infisical/pull/7854
* feat(docs): add folder rbac docs by @adilsitos in https://github.com/Infisical/infisical/pull/7862
* docs(footer): fix forum link by @adkah in https://github.com/Infisical/infisical/pull/7865
* fix(certificate): scope certificate private-key read permission to the certificate subject on v3 issuance by @Vligai in https://github.com/Infisical/infisical/pull/7549
* fix(cert-v3): route DigiCert requests through external issuance on approval by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7870
* improvement(approvals): migrate page shell to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7836
* docs(folder-rbac): enhancements by @adilsitos in https://github.com/Infisical/infisical/pull/7874
* feat(abac): add trim suffix  by @adilsitos in https://github.com/Infisical/infisical/pull/7817
* improvement(secrets): migrate Vault import dialogs to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7794
* feat: add kubernetes MI auth template support by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7713
* fix: collapse signer approvals into a single setup card until a policy exists by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7875
* feat(ui): select all for vault import secret path Combobox by @claude[bot] in https://github.com/Infisical/infisical/pull/7878
* fix(pam): re-check session validity when privileged access is granted by @lb-vn in https://github.com/Infisical/infisical/pull/7852
* feat(docs): add ansible folder operations  by @adilsitos in https://github.com/Infisical/infisical/pull/7871
* docs(secrets-mgmt): clarify dual-phase rotation by @adkah in https://github.com/Infisical/infisical/pull/7864
* docs(secrets-mgmt): refresh spacelift sync by @adkah in https://github.com/Infisical/infisical/pull/7896
* feat(dynamic-secrets): cut over to shared provider registry by @andrewhuhh in https://github.com/Infisical/infisical/pull/7839
* fix: pki ux patches by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7853
* feat: set project retention limits by @varonix0 in https://github.com/Infisical/infisical/pull/7887
* docs(style): add skill for applying docs style by @adkah in https://github.com/Infisical/infisical/pull/7907
* feat(secret-manager): revamp replicate secrets workflow by @andrewhuhh in https://github.com/Infisical/infisical/pull/7793
* fix(identity-ldap-auth): stop returning bind password on GET by @victorvhs017 in https://github.com/Infisical/infisical/pull/7873
* fix(pki): clear NULL extended key usage elements on certificates by @claude[bot] in https://github.com/Infisical/infisical/pull/7900
* chore(docker): refresh stale libssl pin and slim the runtime image by @Vligai in https://github.com/Infisical/infisical/pull/7905
* fix: resolved multi line yaml pasting issue by @akhilmhdh in https://github.com/Infisical/infisical/pull/7920
* chore: storybook preview by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7914
* feat: add helper text for digicert profiles during issuance by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7911
* fix(webhook): render the test event for the webhook's type by @lobocv in https://github.com/Infisical/infisical/pull/7893
* improvement(integrations): move integrations page header and tabs to v3 by @claude[bot] in https://github.com/Infisical/infisical/pull/7909
* feature(ui): add generic v3 loader component and migrate branded loader call sites by @claude[bot] in https://github.com/Infisical/infisical/pull/7895
* improvement: refactor cert profile policy creation to be inline by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7908
* chore: comment storybook preview links by @andrewhuhh in https://github.com/Infisical/infisical/pull/7925
* chore(docker): drop the source tree and recommended packages from the image by @Vligai in https://github.com/Infisical/infisical/pull/7917
* fix(ui): read the real reduced-motion preference in v3 Loader by @claude[bot] in https://github.com/Infisical/infisical/pull/7927


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.164.1...v0.165.1