docs: cli v2.36.4 and Aug 4-7 Platform releases

[mintlify]

Summary

Adds changelog entries for CLI v2.36.4 and the Platform releases dated August 4, 5, and 7, 2026.

Changes

• CLI v2.36.4: kosli attest attachments fix (no longer chowns when staging multi-path attachments).
• Platform, August 4: rich override attestation view; fix for trail-by-artifact lookups failing with flow_tag.
• Platform, August 5: login email autofocus; htmx off-canvas double-login fix.
• Platform, August 7: SCIM role changes sync from Descope; React pages redirect to login on session timeout; unmatched /api/* returns JSON 404.

Context

• CLI v2.36.5 (chore/deps and tests only) skipped — no user-facing changes.
• Server release-2026-08-06 skipped — only deps bumps and expand-phase refactor with nothing user-visible.
• No new kosli-dev/terraform-provider-kosli tags in window.

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
kosli	🔴 Failed	–	Aug 10, 2026, 9:10 AM

[claude]

Claude finished @dangrondahl's task in 1m 55s —— View job

---

Review of PR #357

• Gather context and read changed files
• Review changelog entries against conventions
• Check for review comments to address
• Post review feedback

---

Review summary

The second commit (4bc8166) addressed most prior review feedback:

• SCIM entry removed — per @dangrondahl and @mbevc1. The Aug 7 section header also correctly changed from "Updates" to "Bug fixes" since only bug fixes remain. ✓
• Link text fixed — kosli attest reference → kosli attest artifact reference, matching the actual target page. ✓
• Override attestation reworded — "Richer override attestation view" → "Readable summary for override attestations", with the raw-view note added per @mbevc1's clarification. ✓

Findings

No critical issues.

Suggestions (2):

1. Override attestation entry — open question (line 29): @dangrondahl asked whether this entry belongs in the changelog at all, and @mbevc1's "Yeah, let's remove this" may have referred to it (or to SCIM — hard to tell from context). The entry was reworded but kept. Worth confirming with reviewers whether reword-and-keep was the intended resolution.

2. CLI release date (line 37): The label says "August 3, 2026" — worth verifying this matches the actual GitHub release date for v2.36.4.

What looks good:

• <Update> format, tags, and structure match existing entries.
• Entries are in correct reverse-chronological order.
• The internal link /client_reference/kosli_attest_artifact resolves to an existing page (client_reference/kosli_attest_artifact.md).
• Writing style follows conventions: active voice, American spelling, "Kosli" (not "the Kosli platform").
• Platform entries correctly omit [View on GitHub] links (consistent with prior Platform entries); CLI entry includes one.
• No relative links — root-relative only. ✓

---

·