v2.11.0

> [!NOTE]
> This release adds durable job execution, Docker event streaming, label-based container management, non-UTF-8 workspace uploads, and improved backup recovery. It also improves synchronization, auto-update recovery, project workflows, frontend performance, and error reporting.

### Features and improvements

- Added durable job execution with offline recovery (`58823c2ac4afd674f88bccee38b5da9e985da335`, #3863) (@kmendell).
- Streamed Docker daemon events to the Arcane event log (`2a61718a3af98393ddcdef40d02d30fe416c70ec`, #3862) (@kmendell).
- Added tag-based container updates (`f8f456a62b866108b3c8c433cb04f8d6f6c119bb`, #3865) (@kmendell).
- Added filtering for containers and projects by labels, plus support for hiding containers through labels and Compose metadata (`5dfd281c628bac0b4880c465bd629040d94a301e`, #3874; `6006dbefd64e437e4935c80e38006b96d53c4b93`, #3875) (@kmendell).
- Added support for uploading non-UTF-8 workspace files (`a38a0a2fbff09efeeda6430be15c933af00719fe`, #3859) (@neurekadev).
- Linked Git-managed projects and synced files to their repositories (`6eed748e3fc976ebeaa8a227239ec8b7565ad86d`, #3879) (@FusselTV).
- Added backup recovery key import and reset confirmation controls (`16db5a33747b49350407073aa0040baa5e151947`, #3884) (@neurekadev).
- Improved environment synchronization by surfacing failures and recording manual sync activity (`c6ad1016d913efd100260967dc1a5da8cacb7e32`, #3854) (@kmendell).
- Improved auto-update recovery, job activity integration, and per-container outcome reporting (`5d055f66d796ca79aabf59adfd3d4b7c3986404e`, #3867; `472b50ed15b7d550eee0173e01f1f77a129601bb`, #3872) (@kmendell).
- Improved user validation and password policy feedback (`832cf6eca30be8fbf5f3eb19786f5d8a16c43751`, #3851) (@baejihoon).
- Improved frontend table scrolling while preserving glass effects (`ca9917fc5cbdd462734754409c5657908bd30475`) (@kmendell).
- Improved Easy Join discovery on non-manager environments (`436e20bcee37138fc369eecf02eab6b5f682ace2`, #3902) (@kmendell).
- Improved diagnostics for projects with unreadable `.env` files (`e8c92c5e6bae99251268749c4d16c53ecbebd16f`, #3909) (@kmendell).

### Fixes

- Surfaced JWKS initialization errors instead of readiness timeouts (`eeb79a68e86702825eca2531b933c9bd801d6201`) (@kmendell).
- Normalized identity and display text with Kit struct tags (`b51613f2c6d389e20be507be5db1f53f48600ac6`, #3856) (@kmendell).
- Detected missing S3 repositories and paused remote backups (`4ff83971e1a20c80ceceba27153549047461898d`, #3869) (@kmendell).
- Enforced administrator requirements for environment tokens (`4fe4c7ed9483dff7d43e3c4bee6a92037ce886b4`, #3881) (@kmendell).
- Added missing edge tunnel routes (`88514f756319179e407c96a5b9226825944ccdc0`) (@kmendell).
- Clarified credential requirements when changing repository URLs (`2081406e035b0f761533fa23fdae5e5c810ecdb7`, #3886) (@kmendell).
- Fixed mobile navigation label stacking (`de66d6330d6cf19584b38aa201ae56f8047ebda1`) (@kmendell).

### Refactoring

- Centralized Compose workflows and consolidated project files (`9b45fd5572e59b0696ebfcb61a7d7a983ea0b4ce`, #3860) (@kmendell).
- Consolidated frontend components (`1ad4f285c5a2b8ac471c9fa1b1100b1ab773d5fa`, #3864) (@kmendell).
- Adopted Echo request IDs and SPA static middleware (`f8e4f75473950f4772bb141a8554ce22d9d99393`, #3873) (@kmendell).
- Replaced `svelte-check-rs` with the official `svelte-check` (`3dac10c2d53e2cae90e63b18e468c9263347c693`) (@kmendell).
- Cleaned up effect usage and adopted proper Svelte reactivity (`5df09ed475c4bac4ab6f54e1b9bdde1ac1c55105`, #3904) (@kmendell).
- Aligned frontend stores and attachments with Svelte best practices (`2d0ac4a8c93c04d5657a7c3c5880b739703bc8cd`, #3907) (@kmendell).

### Dependencies

- Updated `go.getarcane.app/acfs` to v0.6.0 (`5ba5ad4d20d8302051112c9c18ad29edc90c2d9f`, #3857) (@kmendell).
- Updated `charm.land/log/v2` from 2.0.0 to 2.0.1 (`57bd14795309fe11901cef510dc1cf8332c9a984`, #3890) (@dependabot[bot]).
- Updated `github.com/containerd/containerd/v2` from 2.3.4 to 2.3.5 (`a8bf2eee2bf1f197cd254b356e89d80c3df08e3f`, #3895) (@dependabot[bot]).
- Updated `golang.org/x/time` from 0.15.0 to 0.16.0 (`34e73a4648f34205a86f3bb460b0626307d72c8e`, #3894) (@dependabot[bot]).
- Updated `golang.org/x/sys` from 0.47.0 to 0.48.0 (`987548b2a807d8d0916592faab55c589abb74a68`, #3889) (@dependabot[bot]).
- Updated `golang.org/x/oauth2` from 0.36.0 to 0.37.0 (`6a9ff7aa64fbec74e379b5dc9622699189093d73`, #3892) (@dependabot[bot]).
- Updated `golang.org/x/sync` from 0.22.0 to 0.23.0 (`a50ab984528cf443c07e1a58052a09af2632dd63`, #3893) (@dependabot[bot]).
- Updated `golang.org/x/mod` from 0.40.0 to 0.41.0 (`a423806a3f1c99073382c6e3b0ce5184aecdd52b`, #3888) (@dependabot[bot]).
- Updated `modernc.org/sqlite` from 1.57.0 to 1.58.0 (`da6712ddfee61340f5286aa9982fd5f8f87bc647`, #3891) (@dependabot[bot]).