feat: reflect netOrk v0.12.0–v0.28.0 release notes

Seventeen releases since the site was last brought up to date, checked
against the changelog and the code at the v0.28.0 tag.

- New feature sections: Security Assessment (TLS/SSH grades, CVE and
  container-image matching, exposure, deep scans; Knowledge Base licence),
  Vulnerability Management (triage queue, decisions with reasons, deferrals
  that come back, verified fixes), DHCP, Managed Services, Notifications
  (Signal).
- Existing sections gain per-user SSH keys and session windows, multi-role
  devices, one device per address per site, LAN Scan, MAC-table topology,
  service checks, site reachability, per-site firewall profiles with diff,
  honoured drift auto-correct, 16 Ansible roles, 18 dashboard widgets.
- Corrections: Docker status is Linux/OMV/QNAP, not Proxmox.
- Roadmap: CVE tracking shipped and is gone from "Planned"; a "Next release"
  group lists what is on main but unreleased (CrowdSec across sites, Windows
  driver, single-use console tickets, reboots refused instead of faked).
- NIS2: Art. 21 (2e) now describes the vulnerability handling that exists,
  (2i) adds attributable terminal sessions; CVE tracking left "coming".
- Persona pages: two new items each, counts updated. Glossary: Kea, WinRM,
  LAPI.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/glossary/terms.ts

@@ -286,6 +286,39 @@ export const GLOSSARY: GlossaryEntry[] = [
     },
     match: ['MFA'],
   },
+  {
+    id: 'kea',
+    category: 'networking',
+    display: 'Kea',
+    fullName: { en: 'ISC Kea DHCP', de: 'ISC Kea DHCP' },
+    definition: {
+      en: 'The DHCP server from ISC that OPNsense uses to hand out addresses; netOrk manages its subnets and reservations.',
+      de: 'Der DHCP-Server von ISC, mit dem OPNsense Adressen vergibt; netOrk verwaltet seine Subnetze und Reservierungen.',
+    },
+    match: ['Kea'],
+  },
+  {
+    id: 'winrm',
+    category: 'networking',
+    display: 'WinRM',
+    fullName: { en: 'Windows Remote Management', de: 'Windows Remote Management' },
+    definition: {
+      en: 'Microsoft\'s remote management protocol for Windows hosts, the Windows counterpart to SSH for automation.',
+      de: 'Microsofts Protokoll zur Fernverwaltung von Windows-Hosts, das Windows-Gegenstück zu SSH für Automatisierung.',
+    },
+    match: ['WinRM'],
+  },
+  {
+    id: 'lapi',
+    category: 'security',
+    display: 'LAPI',
+    fullName: { en: 'CrowdSec Local API', de: 'CrowdSec Local API' },
+    definition: {
+      en: 'The CrowdSec service that collects what its agents detect and holds the resulting ban decisions for one site or host.',
+      de: 'Der CrowdSec-Dienst, der sammelt, was seine Agenten erkennen, und die daraus folgenden Sperrentscheidungen für einen Standort oder Host hält.',
+    },
+    match: ['LAPI'],
+  },
   {
     id: 'nvd',
     category: 'security',