Changelog

Update CHANGELOG.md in the same change as anything an operator would notice, such as:

• routes or node API expectations
• configuration keys
• security behavior
• deployment steps

Add one short bullet under ## [Unreleased], in Added, Changed, Fixed or Removed. Say what changed and any action operators need to take. Skip refactors, tests and internal-only work. If [Unreleased] does not exist yet, create it above the latest release.