#What's Changed

[Feature] A new FAQ covers who can decrypt your secrets, losing a custom vault key, what apivault run does to .env files, AI agent scopes, and CI/CD.
[Feature] CI/CD pipelines join the use cases, pointing to scoped, expiring service tokens.
[Fix] The homepage no longer says secrets are encrypted in your browser. It now states that they are encrypted with AES-256-GCM before storage, and that custom vault keys are never stored.
[Improvement] The "New" announcement badge above the homepage headline has been removed, so the hero opens directly on the headline.
[Improvement] The CLI and MCP highlight carousels stop rotating while focused by keyboard or when reduced motion is requested, and each highlight is now a real button inside its heading.