Sync the self-hosting stack

CHANGELOG.md

@@ -9,6 +9,22 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-09 — Find the codes of your Quick Assist sessions again `api 0.133.0` `web 0.163.0`
+
+Your Quick Assist page now shows the code of every session, so a reload or a trip to another page no
+longer loses it. A session still waiting for the person brings its card back, with the code, the link
+and their copy buttons. Sessions that are connected or finished keep their code too, drawn quieter
+because it no longer opens anything, so you can tell one call from another when the person reads you
+the code they were given.
+
+You only see the codes of the sessions you started; a colleague's sessions stay out of your list, as
+before. The code is stored encrypted under a key derived from the vault key, and is never used to find
+a session: a code is still redeemed by its keyed hash alone.
+
+Update the API and the web image. No agent update is required. The API applies an additive schema
+update (a column for the encrypted code). Sessions started before this release have no code to show,
+and one still waiting says so and offers to cancel it.
+
 ## 2026-10-09 — Keep Jarvis Quick Assist and type the code into it `agent 0.50.0` `api 0.132.0` `web 0.162.0`
 
 The person you help no longer needs a new download for every call. They keep