Potential experiments

fix(discovery): keep category counts when a search resolves (#2363)

fix(app): clamp persisted accessibility values (#2362)

fix(desktop): return a generic clipboard copy error (#2361)

fix(desktop): verify privileged ipc senders (#2360)

fix(desktop): pin outbound fetches to a validated address (#2359)

fix(auth): guard stale submissions and rework form error mapping (#2358)

fix(auth): require a hashed poll secret for desktop handoff (#2357)

fix(auth): revoke the parsed token on logout (#2356)

fix(platform): parse api error responses in one place (#2355)

fix(app-proxy): validate config, csp sources, cap resource use (#2354)

fix(gateway): rate limit resume like identify (#2353)

fix(gateway): only trust the client ip header when enabled (#2352)

fix(gateway): bound the zstd decompression window (#2351)

fix(read-state): keep a failed ack dispatch from failing acks (#2350)

feat(api): serve well-known discovery with etag and 304 (#2349)

fix(auth): bucket phone attempt risk by v4 and v6 subnet (#2348)

fix(auth): harden login rate keys and totp reuse (#2347)

fix(api): validate push and domain verification targets (#2346)

fix(api): trust recorded upload types and bound edit sizes (#2345)

fix(api): bound storage listings, ranges and search paging (#2344)