Vizier v0.14.19-pemdq9

Pixie Vizier Release:
pem direct-query — iss=PL + sub=service claim enforcement + doc line-ref refresh (CR r3357199175, r3364977606)

Vizier v0.14.19-pemdq10

Pixie Vizier Release:
pemdq10: fix direct-query service-scope auth (pemdq9 rejected all real service tokens)

Vizier v0.14.19-aeprod18

Pixie Vizier Release:
AE PR-53 review pass: chhttp consolidation + dead code purge + services scaffold

Cuts the first AE image including the PR-53 review follow-ups:

• internal/chhttp/ collapses the three duplicated HTTP CH clients (Applier,
  sink.ClickHouseHTTP, ClickHouseWatermarkStore) into one. INSERT/SELECT/
  stream all route through chhttp.Client; fail-loud + summary-parse shared.
• script/, pixie/, streaming/{supervisor,writer}.go dead funcs + types
  removed (9 unreachable per x/tools/cmd/deadcode).
• passthrough_test stale 13-vs-12 expectations fixed.
• cmd/main.go wires services.SetupService + SetupSSLClientFlags +
  PostFlagSetupAndParse + SetupServiceLogging.
• 17 harness shell scripts get the Apache header (exec bits preserved).

Verified end-to-end against the live k3s ClickHouse: clickhouse pkg + sink
attribution + trigger watermark integration tests PASS through chhttp; the
single pre-existing sink-pixie-rows failure on baseline 274f6f4 is the
silent-drop guard catching a stale 9-key test fixture against a 16-column
schema (safety machinery firing correctly, not a regression).

Vizier v0.14.19-aeprod17

Pixie Vizier Release:
carnot hostname-push fix + dx_evidence_* views

Vizier v0.14.19-aeprod16

Pixie Vizier Release:
AE: dx_attack_graph view + /dx/attack_graph ingest (PR #65)

Vizier v0.14.19-aeprod15

Pixie Vizier Release:
AE: dx_attack_graph_malicious view at boot (PR #65)

Vizier v0.14.19-aeprod13

Pixie Vizier Release:
AE aeprod13 — dx_attack_graph px-readable numeric types (Int64/Float64)

Vizier v0.14.19-aeprod12

Pixie Vizier Release:
AE aeprod12 — dx_attack_graph created at boot (+ allowlist rename, DX-steering diagnostics)

Vizier v0.14.19-aeprod11

Pixie Vizier Release:
vizier release v0.14.19-aeprod11: AE pxl #px:set max_output_rows_per_table=1000000 (lift Pixie 10k cap, F1 fix)

Vizier v0.14.19-aeprod10

Pixie Vizier Release:
vizier release v0.14.19-aeprod10: AE passthrough precompiled+concurrent + bazel reconcile/compile deps fix (bazel rebuilds only adaptive_export)