chore: update changelog with today's fixes

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

CHANGELOG.md

@@ -14,8 +14,9 @@ All notable changes to MokoGitea are documented here. Versions follow the format
     * Domain restriction on packages and keys (comma-separated allowed domains)
     * RepoScope enforcement — packages scoped to specific repos
     * Configurable license key prefix per organization
-    * Master key always visible with Regenerate button
+    * Master key auto-generates, sorts first in key list
     * License package creation at repo level via modal
+    * Key generation modal with licensee name, email, and domain fields
     * Manual release-to-stream mapping with UI selector
     * Double confirmation modals for permanent deletion
     * Combolist channel picker (replaces checkboxes)
@@ -35,14 +36,20 @@ All notable changes to MokoGitea are documented here. Versions follow the format
     * Feed always public — downloads gated separately
     * Stream-name tags supported alongside version tags
     * Omit `<client>` for package extension types
-    * No `<downloadkey>` when require_key is off
+    * `<downloadkey>` only when download_gating is prerelease or all
+    * Version extracted from asset filename (matches actual download)
+    * Joomla tag values verified: dev, alpha, beta, rc, stable
   * feat(orgs): enterprise sub-org hierarchy with parent-child relationships
   * feat(repos): three-level visibility — Public (200), Private (403), Hidden (404)
   * feat(settings): Update Server settings page with enable toggle in Advanced Settings
   * feat(settings): advanced settings on dedicated page with dividing headers
   * feat(settings): icons on all settings navbars (repo, org, user, admin)
   * feat(ui): styled 403 Access Denied page with inline login form
-  * feat(issues): custom fields foundation — model, migration, settings UI
+  * feat(issues): custom fields with inline editing in issue sidebar
+  * feat(ui): two-in-one Update Server / Licenses tab
+    * No gating: shows "Update Server" tab with feed URLs only
+    * Gated: shows "Licenses" tab with full key management
+    * `<downloadkey>` only appears when downloads are gated
 * SECURITY
   * fix(security): ownership guards on all API handlers (cross-org prevention)
   * fix(security): RepoScope JSON parsing (substring matching bug)
@@ -62,6 +69,10 @@ All notable changes to MokoGitea are documented here. Versions follow the format
   * fix(build): permanent fixes for AI migration, feed/file.go, unused imports
   * fix(updateserver): version extracted from asset filename (not release title)
   * fix(updateserver): omit `<client>` for package types per Joomla spec
+  * fix(updateserver): `<downloadkey>` only shown when downloads are gated
+  * fix(updateserver): prevent stream name tag from overriding asset-derived version
+  * fix(build): restore build/ directory after accidental deletion
+  * fix(licenses): master key banner removed, master keys sort first in table
 
 ## [v1.26.1-moko.05] - 2026-05-31