Sessions that really close, and tabs that answer the click

Projects Pierrr hosts on the Free plan sleep every night, from 00:00 to 08:00 (UTC), and wake up on their own at 08:00. During that window the project cannot be started, built or deployed. Visitors get a page saying the site is asleep and when it comes back.
A Free project with no deployment and no member action for 30 days is switched off at the next night sleep and does not wake up on its own. A member wakes it from the project page, outside the night window.
Either way the project keeps its data: database, volumes and files. Moving to a paid plan lifts these rules at once. Projects you self-host on your own server are not affected.

Revoking a session from Settings, Security tab, closes it at once, including on the device it belongs to.
Resetting your password closes every open session. A session no longer lasts beyond 30 days, even when used every week.
A verification or reset link works once, even when opened twice at the same moment.
Verification and reset links sent before this update are no longer valid: request a new one from the sign-in screen.
Database access becomes a permission of its own, held by the Owner and Maintainer roles. The Developer role no longer opens the database panel.
The assistant and the MCP server never return a secret's value any more, only its name.
Uploaded images (logo, profile picture) are re-encoded and their pixel size is capped.

Switching tabs answers the click on every page: a skeleton shows while the data arrives.
A page that cannot load its data says so, instead of showing an empty list or wrong values.
An expired reset link offers to request a new one right away.
Legal pages still being written say so plainly.
The documentation search leads to the right section of the page.
On the English site, the language you chose sticks from page to page, and picking French takes you back to the French site.