chore(hotfix/9.24.5): Release v9.25.0

[github-actions]

🤖 I have created a release beep boop

9.25.0 (2026-08-27)

Features

• sonarqube: provision SONAR_TOKEN as GitLab group CI variable (201b64f)

Bug Fixes

• ci: correct keycloak healthcheck flag typo (fsS -> -fsS) (f43a04a)
• ci: query keycloak health endpoint on management port 9000 (5f27716)
• ci: surface keycloak boot logs on Playwright failure (d5166e3)
• client: map footer version label and link to pr/sha/tag (f54017a)
• client: map footer version link to release tag or PR instead of 404 (738cf6e), closes #2566
• gitlab: return existing user on 409 instead of failing sync (c7c0ad2)
• keycloak: preserve full path when creating role groups (a79bb5a)
• server-nestjs: delete owned GitLab repos on explicit repository deletion (64613b3)
• server-nestjs: guard createUser against non-string GitLab error descriptions (97dff7a)
• server-nestjs: include projectsRootDir in vault techRO policy path (e4356e9)
• server-nestjs: match GitLab validation errors with object descriptions (6b86d7e), closes #2544
• server-nestjs: purge argocd values files on project delete (33e93db)
• server-nestjs: resolve Keycloak root group by path, not name (a42f090)
• server-nestjs: surface post-creation repository sync failure (4547c08)

Miscellaneous Chores

• hotfix/9.24.5: cherry-pick PR #2608 (a0bd156)

Refactoring

• keycloak: parse group representations at the client boundary (a261fb6)

---

This PR was generated with Release Please. See documentation.