- Added Cosign signature verification for OCI Helm charts and a new generic HMAC alert provider for webhook authentication.
- Introduced `flux push artifact` to publish a single YAML file to OCI and `flux diff artifact` to detect local changes before pushing.
- Reduced kustomize controller memory usage by 90%, aligned status conditions with Kubernetes standards, and added new documentation guides and FAQs.