v1.18.0

## What's Changed
* test(e2e): match the simplified Neon isolation notice by @RyanGroch in https://github.com/dyad-sh/dyad/pull/4693
* feat(cloudflare): add a Refresh button for Wrangler config detection by @RyanGroch in https://github.com/dyad-sh/dyad/pull/4685
* Document preview-domain experiment rollout and prompt rules by @wwwillchen in https://github.com/dyad-sh/dyad/pull/4663
* Make model usage selection easier to see by @wwwillchen in https://github.com/dyad-sh/dyad/pull/4697
* feat: add opt-in per-app localhost preview domains by @azizmejri1 in https://github.com/dyad-sh/dyad/pull/4639
* Repair benchmark scoring and accounting, rescore saved checkpoints by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4703
* Queue app test runs instead of cancelling active runs by @azizmejri1 in https://github.com/dyad-sh/dyad/pull/4679
* Keep questionnaires open without a timeout by @wwwillchen in https://github.com/dyad-sh/dyad/pull/4696
* fix(cloudflare): make the repository access prompt usable by @RyanGroch in https://github.com/dyad-sh/dyad/pull/4682
* Preserve new Anthropic thinking after chat mode switches by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4695
* feat: allow optional setup inputs for catalog plugins by @RyanGroch in https://github.com/dyad-sh/dyad/pull/4690
* Enable safe MCP tool consent skipping by default for Pro by @wwwillchen in https://github.com/dyad-sh/dyad/pull/4709
* fix(windows-spawn): pass cmd-quoted /c payload verbatim to libuv/node-pty by @detail-app[bot] in https://github.com/dyad-sh/dyad/pull/4516
* docs: correct in-chat submission optimistic-clear scope in chat-modes rule by @detail-app[bot] in https://github.com/dyad-sh/dyad/pull/4608
* fix(templates): Preserve user .env* / .git / .dyad over template copies in in-place apply by @detail-app[bot] in https://github.com/dyad-sh/dyad/pull/4497
* fix(local-agent): report has_more_before truthfully when read_chat pages past end of chat by @detail-app[bot] in https://github.com/dyad-sh/dyad/pull/4519
* fix(coolify-setup): validate host-derived domain against the apply-time charset before using it by @detail-app[bot] in https://github.com/dyad-sh/dyad/pull/4503
* fix(coolify-setup): recognize a hostname host's derived name in the HTTPS guard by @detail-app[bot] in https://github.com/dyad-sh/dyad/pull/4544
* fix(coolify-setup): preserve the signal name when the install is killed by a signal by @detail-app[bot] in https://github.com/dyad-sh/dyad/pull/4546
* fix(coolify): cancel in-flight deploys when setup switches instances by @detail-app[bot] in https://github.com/dyad-sh/dyad/pull/4547
* Fix Claude PR review write permissions after the agent changes directory by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4714
* Remove noisy distributed-machine source inventory tests by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4707
* Keep chats and tests running during Supabase function deployments by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4712
* Support PDF attachments as chat context by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4671
* Fix streaming chat overriding user scroll-away by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4706
* Fix main CI boundary test for Supabase administration by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4716
* Add a safety-reviewed shell experiment for Pro Agent mode by @keppo-bot[bot] in https://github.com/dyad-sh/dyad/pull/4625
* Fix Windows E2E PDF snapshots and chat scroll restoration by @azizmejri1 in https://github.com/dyad-sh/dyad/pull/4719
* Fix flaky Windows shell timeout unit test by @azizmejri1 in https://github.com/dyad-sh/dyad/pull/4718
* Bump to v1.18.0-beta.1 by @azizmejri1 in https://github.com/dyad-sh/dyad/pull/4721


**Full Changelog**: https://github.com/dyad-sh/dyad/compare/v1.17.0...v1.18.0