v0.165.10

## What's Changed
* fix(group-service): block sub-org membership changes on parent-owned groups by @victorvhs017 in https://github.com/Infisical/infisical/pull/8030
* fix(pki): issue only policy-validated subject and SAN values by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8056
* fix(pam): atomic recording secret mint by @bernie-g in https://github.com/Infisical/infisical/pull/8043
* docs(nav): restore Agent Vault as an external link by @claude[bot] in https://github.com/Infisical/infisical/pull/8077
* feat: validation rule api revamp by @varonix0 in https://github.com/Infisical/infisical/pull/8046
* improvement(frontend): migrate kmip servers page to v3 components by @claude[bot] in https://github.com/Infisical/infisical/pull/8066
* improvement(signup): streamline onboarding and workspace navigation by @claude[bot] in https://github.com/Infisical/infisical/pull/8007
* fix(announcements): stabilize modal height and image loading by @andrewhuhh in https://github.com/Infisical/infisical/pull/8042
* chore: add upgrade impact for v0.165.9 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8071
* feat(pki): manage imported certificates by attaching a certificate profile by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7961
* chore(dep): node base and npm bump by @Vligai in https://github.com/Infisical/infisical/pull/8051
* feat(vault-migration): add support for folder creation by @adilsitos in https://github.com/Infisical/infisical/pull/7928


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.165.9...v0.165.10