Sync the self-hosting stack

CHANGELOG.md

@@ -9,6 +9,23 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-08 — The remote-desktop notice names everybody in one sentence, with a contact card behind each name `agent 0.37.0` `api 0.123.0` `web 0.152.0`
+
+When several operators are connected to the same Windows session, the notice no longer lists them one
+per line. It names them in one sentence, such as "Antoine and Brian are remotely viewing and
+controlling this machine.", followed by a second sentence for operators who can only watch and by
+your organization's sentence once. The words are in your organization's consent language.
+
+Each name on the notice is underlined. When the person at the machine rests the pointer on a name, that
+operator's card opens under it with their picture (or initials), full name, what they are allowed to
+do, email, phone and company. A click keeps the card open until they click the name or the card again.
+Operators can add a phone number and a company under **Settings → Profile**; empty fields are left off
+the card. The picture is the profile picture already shown in the console.
+
+Update the API, the web console and the agent release image. The API applies an additive schema update
+(two optional profile fields); existing accounts are unchanged. Until all three are updated, the notice
+works as before: an older agent draws the server's sentence, and an older API sends no cards.
+
 ## 2026-10-08 — One remote-desktop notice for every operator, and clearer wording `agent 0.36.0` `api 0.122.0`
 
 When two operators connect to the same Windows session, the person at the machine now sees one notice