Sync the self-hosting stack

CHANGELOG.md

@@ -9,6 +9,23 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-08 — The person at the machine can end a remote-desktop session from the notice `agent 0.39.0` `api 0.125.0` `web 0.153.0`
+
+The notice at the top of the screen now ends with a **Disconnect** button. Pressing it ends the
+session straight away, and the sessions of every other operator the notice names. Each operator's
+card, opened from their name, also has a **Disconnect** button that ends that operator's sessions
+only. The button lights up in the Jarvis indigo under the pointer, and moving the notice by dragging
+never presses it.
+
+The operator sees "The person at the machine ended the session from the notice on their screen.",
+and the session history records it under its own reason. The session is not resumed automatically;
+the operator has to open it again, and under *Ask first* the person is asked again.
+
+Update the API, the web console and the agent release image. The API applies an additive schema update
+(a new value for the session's end reason). Update the API no later than the agent: an older API
+records these endings as a lost connection. With an older API the button shows "×" instead of its
+word; with an older agent there is no button.
+
 ## 2026-10-08 — The remote-desktop notice says "connecting" until the operator can see `agent 0.38.0` `api 0.124.0`
 
 The notice on the machine appears before anything is captured, which is the rule: nobody is watched