Sync the self-hosting stack

CHANGELOG.md

@@ -9,6 +9,22 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-12 — Operators can watch screens again `api 0.141.0`
+
+**The built-in Operator profile includes the screen again.** Quick Assist asks for the right to see
+screens in the helper's home organization, and since `api 0.138.0` the Operator profile a fresh
+install starts with did not carry it — so a stock operator could not start a session, although Quick
+Assist was announced for "Operator or above". It carries it again. The same right is the screen of
+every machine in the organization: an operator can watch it, never act on it — taking the mouse and
+keyboard stays a separate right, and so does opening a shell. A line posed on a folder or a machine
+still narrows it there.
+
+**Only a fresh install starts from this.** Built-in profiles are written once and never changed by an
+upgrade, so if your instance already exists, its Operator profile stays exactly as it is. To let
+your operators start Quick Assist, add **Watch a screen** to the Operator profile in the Admin Center.
+
+Update the API image. No web or agent update is required, and nothing in the schema changes.
+
 ## 2026-10-12 — Ready for the release that removes the old access columns `api 0.140.0`
 
 **Nothing changes on your screens.** This build is the step before the release that removes the