v2.5.168 – v2.5.174 — 2026-07-21

• fix(security): US spelling in CRA handler (misspell gate)
• feat(security): CRA compliance cockpit in the Security Advisor
• docs(plan): mark uptime monitor extension as done
• feat(security): CRA support-period covers all core services + fix MariaDB version
• feat(security): verify Debian security ring + per-service hardening checks
• feat(security): informational nginx/PowerDNS checks + honest CRA/NIS2 scope note
• docs(changelog): consolidate 2026-07-21 entries (v2.5.168–v2.5.171) into one
• chore(release): consolidate same-day security fixes into one changelog entry
• fix(php-fpm): saved PHP ini overrides no longer drift out of the pool
• feat(channels): panel channel switch + existing-install migration (Phase 2)
• feat(release): apt release channels — stable / testing (enconf-only)
• feat(channels): per-server channel override in the server editor