- Added cosign signing for all Argo CD container images and generated SLSA Level 3 provenance for images and CLI binaries
- Implemented per‑message RBAC verification (previously only during handshake) to strengthen access control
- Updated documentation with upgrade guidance and details on signature/provenance verification
