<!--
Thanks for the PR! A few quick checks before submitting:

- [ ] Branch name follows feat/ | fix/ | docs/ | ci/ | security/ | ui/ (see CONTRIBUTING.md)
- [ ] The diff fits in a reviewer's head (one concern per PR)
- [ ] Tests touch the area you changed
- [ ] No emojis in code, docs, or commit messages

Security reports DO NOT belong here. See SECURITY.md.
-->

## What

<!-- What this PR does, in 1–3 sentences. The diff already shows the how. -->

## Why

<!-- Why this change is worth making. Link the issue/discussion if there is one. -->

## Test plan

<!--
- [ ] What did you verify locally
- [ ] What relies on CI checks (smoke, unit-tests, npm-audit, trivy, analyze)
-->

## Notes for reviewers

<!-- Trade-offs, alternatives considered, things to look at first. Delete if there are none. -->
