v0.165.11

## What's Changed
* improvement(frontend): migrate kmip server details page to v3 by @claude[bot] in https://github.com/Infisical/infisical/pull/8067
* improvement(secret-sync): pin sync behaviour with end-to-end tests and a runnable test harness by @lobocv in https://github.com/Infisical/infisical/pull/8062
* fix(queue): log job failures and make PINO_LOG_LEVEL work by @lobocv in https://github.com/Infisical/infisical/pull/8089
* improvement(frontend): test secrets activation modal versus card by @claude[bot] in https://github.com/Infisical/infisical/pull/8060
* chore(ui): add semantic z-index registry by @andrewhuhh in https://github.com/Infisical/infisical/pull/8082
* fix(auth): preserve password autofill styling and signup username targeting by @andrewhuhh in https://github.com/Infisical/infisical/pull/8084
* improvement(secret-syncs): modernize forms and harden destination selection by @andrewhuhh in https://github.com/Infisical/infisical/pull/7902
* fix(ui): disable autocomplete for resource names by @andrewhuhh in https://github.com/Infisical/infisical/pull/8086
* chore(auth): revert grouped input autofill styling and signup form restructure by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/8102
* feat(gateways): make relay optional by @bernie-g in https://github.com/Infisical/infisical/pull/7992
* feat(agent-vault): agents that run without credentials by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8000
* chore: resolved personal override failure by @akhilmhdh in https://github.com/Infisical/infisical/pull/8106
* docs(get-started): overhaul get started section by @adkah in https://github.com/Infisical/infisical/pull/8098
* docs(get-started): remove dupe heading by @adkah in https://github.com/Infisical/infisical/pull/8113
* improvement(agent-vault): mark agent vault as preview by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8111
* feat: support custom X.509 extensions on certificate policies and profiles by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7943
* fix(ui): render project access errors during route loading by @andrewhuhh in https://github.com/Infisical/infisical/pull/8103
* fix(kms): block cross-project key deletion via project cleanup by @bernie-g in https://github.com/Infisical/infisical/pull/8112
* feat: added support for self serve upgrade by @akhilmhdh in https://github.com/Infisical/infisical/pull/8088
* fix(pki-sync): enforce project boundary when resolving app connections by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8118
* feat(ui): track command menu usage by @andrewhuhh in https://github.com/Infisical/infisical/pull/8115
* feat(pam): snowflake account by @lb-vn in https://github.com/Infisical/infisical/pull/8044
* patch(pam): snowflake cli version by @lb-vn in https://github.com/Infisical/infisical/pull/8119
* fix(auth): move invalid credentials to password field by @andrewhuhh in https://github.com/Infisical/infisical/pull/8114
* improvement(ui): adopt shared z-index values across v3 primitives by @andrewhuhh in https://github.com/Infisical/infisical/pull/8083
* improvement(frontend): migrate org settings headers and tabs to v3 by @claude[bot] in https://github.com/Infisical/infisical/pull/8070
* fix: allow group-derived project members as approval policy approvers and bypassers by @claude[bot] in https://github.com/Infisical/infisical/pull/8075
* feat(secrets): implement copy secrets workflow by @andrewhuhh in https://github.com/Infisical/infisical/pull/7951
* fix(auth): restore signup form ownership and autofill by @andrewhuhh in https://github.com/Infisical/infisical/pull/8101
* improvement(frontend): focus dominant search inputs with the / hotkey by @claude[bot] in https://github.com/Infisical/infisical/pull/8069
* improvement(admin): migrate server console headers to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8131
* improvement(project): redesign general settings by @andrewhuhh in https://github.com/Infisical/infisical/pull/8116
* fix(api): preserve glob braces in identity auth claims by @andrewhuhh in https://github.com/Infisical/infisical/pull/8096
* docs(readme): refresh hero image, fix broken links, move community to forum by @jakehulberg in https://github.com/Infisical/infisical/pull/8135
* docs(trim-suffix): enhance-docs by @adilsitos in https://github.com/Infisical/infisical/pull/7892
* chore: add upgrade impact for v0.165.10 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8090
* feat(refac): move old modal to v3 by @adilsitos in https://github.com/Infisical/infisical/pull/8133
* fix(secret-rotation): retry Azure client secret revoke and clean up on failure by @claude[bot] in https://github.com/Infisical/infisical/pull/8048
* fix(webhook): prevent webhook events from being lost during long runs by @lobocv in https://github.com/Infisical/infisical/pull/8122
* fix: resolved loosing invoice on losing sub by @akhilmhdh in https://github.com/Infisical/infisical/pull/8142
* chore(deps): refresh Debian security pins and update socks to 2.8.10 by @Vligai in https://github.com/Infisical/infisical/pull/8140
* fix: webhook registration when github radar is not configured by @mathnogueira in https://github.com/Infisical/infisical/pull/8136
* feat: add time units to secret scanning env variables by @mathnogueira in https://github.com/Infisical/infisical/pull/8132


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.165.10...v0.165.11