v0.166.9

## What's Changed
* chore: add upgrade impact for v0.166.8 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8681
* docs: note that Palo Alto Networks syncs need the certificate's private key by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8669
* fix(ui): keep the org name visible in project and product scope by @andrewhuhh in https://github.com/Infisical/infisical/pull/8676
* fix(ui): right-align sheet footers with Cancel before the primary action by @andrewhuhh in https://github.com/Infisical/infisical/pull/8675
* docs(cert-agent): combined certificate chain output by @bernie-g in https://github.com/Infisical/infisical/pull/8660
* feat(pam): store session recordings in S3-compatible storage by @lb-vn in https://github.com/Infisical/infisical/pull/8485
* docs(cli): note that logout deletes the offline secrets backup by @lobocv in https://github.com/Infisical/infisical/pull/8648
* chore: validate freeze flag before release by @Thiago-AS in https://github.com/Infisical/infisical/pull/8699
* fix: remove PAM from project templates list by @mathnogueira in https://github.com/Infisical/infisical/pull/8710
* feat(pki): add AWS KMS-backed signing keys for internal CAs by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8637
* fix(identity-access-token): expire the uses-remaining counter with its token by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/8654
* fix(deps): upgrade backend mail, template, telemetry and native hashing packages by @andrewhuhh in https://github.com/Infisical/infisical/pull/8679
* fix(cert-manager): validate certificate profile name inline and keep wizard on the failing step by @andrewhuhh in https://github.com/Infisical/infisical/pull/8664
* chore(frontend): upgrade TypeScript to 5.9 and drop TS 7-removed options by @andrewhuhh in https://github.com/Infisical/infisical/pull/8682
* improvement(ui): migrate CLI redirect page to V3 and align its layout by @andrewhuhh in https://github.com/Infisical/infisical/pull/8671
* fix(billing): show self-hosted billing guidance by license state by @andrewhuhh in https://github.com/Infisical/infisical/pull/8680
* fix(ui): use sub-org scope color for sub-org actions by @andrewhuhh in https://github.com/Infisical/infisical/pull/8690
* fix(secrets-overview): keep row action bar visible while a focused row is hovered by @andrewhuhh in https://github.com/Infisical/infisical/pull/8696
* improvement(frontend): group Add Machine Identity to Project options by product by @andrewhuhh in https://github.com/Infisical/infisical/pull/8701
* improvement(insights): show a blurred preview when Insights is not on the plan by @andrewhuhh in https://github.com/Infisical/infisical/pull/8703
* feat(agent-vault): move variables from access bundles to Agent Vault as a whole by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/8581
* feat(ui): suggested values for naming inputs, starting with secret sync names by @andrewhuhh in https://github.com/Infisical/infisical/pull/8702
* fix(ui): clean up org Product Settings tab by @andrewhuhh in https://github.com/Infisical/infisical/pull/8713
* docs(agent-vault): the session token and access bundle can come from the environment by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8104
* improvement(ui): move org general and security settings cards to footer layout by @andrewhuhh in https://github.com/Infisical/infisical/pull/8725
* docs(kms): overhaul section by @adkah in https://github.com/Infisical/infisical/pull/8686
* feat(ui): shared EmailInput chip field and email validation by @andrewhuhh in https://github.com/Infisical/infisical/pull/8663
* fix(litellm): accept proxy master keys when validating connections by @victorvhs017 in https://github.com/Infisical/infisical/pull/8712
* improvement(secret-sharing): separator collapse and sticky sheet footer by @andrewhuhh in https://github.com/Infisical/infisical/pull/8732
* improvement(ui): migrate remaining v2 confirm modals to DeleteConfirmDialog by @andrewhuhh in https://github.com/Infisical/infisical/pull/8716
* feat(ui): offer folder access on Pro from the custom role upgrade gate by @andrewhuhh in https://github.com/Infisical/infisical/pull/8720
* improvement(frontend): default Add Machine Identity sheet to Assign Existing by @andrewhuhh in https://github.com/Infisical/infisical/pull/8722
* feat(ui): suggest app connection names from provider and auth method by @andrewhuhh in https://github.com/Infisical/infisical/pull/8723
* feat(ui): suggest honey token names from type and environment by @andrewhuhh in https://github.com/Infisical/infisical/pull/8727
* feat(ui): suggest certificate authority names from CA type, common name, and issuer by @andrewhuhh in https://github.com/Infisical/infisical/pull/8728
* feat(ui): suggest approval policy names from type, environments, and path by @andrewhuhh in https://github.com/Infisical/infisical/pull/8729
* feat(ui): suggest certificate policy names from the selected preset by @andrewhuhh in https://github.com/Infisical/infisical/pull/8731
* docs: migration from legacy InfiscialSecret k8s CRD's by @varonix0 in https://github.com/Infisical/infisical/pull/8736
* feat(signup): open the chosen plan's trial after signup from the pricing page by @andrewhuhh in https://github.com/Infisical/infisical/pull/8705
* fix(secrets): secret name cell focus, scroll, and empty-state fixes by @andrewhuhh in https://github.com/Infisical/infisical/pull/8735
* fix(ui): drop h-full from org page roots so bottom padding survives scroll by @andrewhuhh in https://github.com/Infisical/infisical/pull/8739
* feat(signup): open the pricing trial prompt for signed-in users by @andrewhuhh in https://github.com/Infisical/infisical/pull/8738
* improvement(secrets): make the overview Manage Access button easier to find by @andrewhuhh in https://github.com/Infisical/infisical/pull/8718
* feat: findings revamp by @mathnogueira in https://github.com/Infisical/infisical/pull/8577
* feat: data store list revamp by @mathnogueira in https://github.com/Infisical/infisical/pull/8631
* feat: redesign data source flow by @mathnogueira in https://github.com/Infisical/infisical/pull/8641
* improvement(ui): rename DeleteConfirmDialog to ConfirmationAlertDialog by @andrewhuhh in https://github.com/Infisical/infisical/pull/8717
* feat(db): add audit_log_streams table to sanitized schema by @victorvhs017 in https://github.com/Infisical/infisical/pull/8746
* fix(secret-scanning): reject data sources that reuse an app connection by @claude[bot] in https://github.com/Infisical/infisical/pull/8758
* improvement(pki): pkcs12 password policy by @bernie-g in https://github.com/Infisical/infisical/pull/8674
* fix(webhook): stop delete endpoint from returning encrypted columns by @Arunkoo in https://github.com/Infisical/infisical/pull/8643
* fix: use write op instead of delete in metrics by @mathnogueira in https://github.com/Infisical/infisical/pull/8764
* docs(cli): add troubleshooting guide for failed API requests by @victorvhs017 in https://github.com/Infisical/infisical/pull/8697
* chore(frontend): migrate to React 19 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8721
* improvement(groups): auto-populate group slug from name by @andrewhuhh in https://github.com/Infisical/infisical/pull/8766
* docs(yaml-migration): update docs to reflect the new behavior of the CLI by @adilsitos in https://github.com/Infisical/infisical/pull/8762
* fix(secrets): explain disabled edit and block move for managed secrets by @andrewhuhh in https://github.com/Infisical/infisical/pull/8704
* improvement(auth): name login button in SSO enforcement toast on select-org by @victorvhs017 in https://github.com/Infisical/infisical/pull/8763
* improvement(frontend): consistent slug auto-fill from name across create forms by @andrewhuhh in https://github.com/Infisical/infisical/pull/8768
* docs(ax): agentic quickstart by @adkah in https://github.com/Infisical/infisical/pull/8324
* docs(cli): add sm projects commands by @adkah in https://github.com/Infisical/infisical/pull/8737
* docs(cli): clarify av env variables by @adkah in https://github.com/Infisical/infisical/pull/8761
* fix(approvals): show request folder path in change requests list by @andrewhuhh in https://github.com/Infisical/infisical/pull/8678
* fix(agent-vault): drop discard confirmation from Create Session dialog by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/8770
* docs(agent-vault): mention env variables in the quickstart by @adkah in https://github.com/Infisical/infisical/pull/8771
* docs: add new plans rate limiting values by @Thiago-AS in https://github.com/Infisical/infisical/pull/8775
* feat: added API E2E for scim by @akhilmhdh in https://github.com/Infisical/infisical/pull/8687
* docs(readme): add Agent Vault section by @adkah in https://github.com/Infisical/infisical/pull/8782
* feat(onboarding): add explicit telemetry for onboarding resource links by @andrewhuhh in https://github.com/Infisical/infisical/pull/8774
* feat(ui): show page breadcrumbs in the top navigation on every route by @andrewhuhh in https://github.com/Infisical/infisical/pull/8747
* chore(data-migration): secret access by @adilsitos in https://github.com/Infisical/infisical/pull/8783
* chore(data-migration): secret change by @adilsitos in https://github.com/Infisical/infisical/pull/8784
* improvement(secrets): surface secret imports in Add New dropdown by @andrewhuhh in https://github.com/Infisical/infisical/pull/8769
* fix(docs): improve agentic quickstart styling by @adkah in https://github.com/Infisical/infisical/pull/8785
* docs(readme): audit README for accuracy and product coverage by @adkah in https://github.com/Infisical/infisical/pull/8787
* feat(billing-v2): show offline license usage on unified billing page by @victorvhs017 in https://github.com/Infisical/infisical/pull/8777

## New Contributors
* @Arunkoo made their first contribution in https://github.com/Infisical/infisical/pull/8643

**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.166.8...v0.166.9