Fix stale streamed markdown rendering (#261)

Harden sync run lifecycle (#246)

- Enforce one running sync per source/slot and make terminal/progress updates no-op unless the run is still running.
- Add scheduler supervision, per-phase timeouts, and connector trigger timeouts so stalled work cannot block future ticks.
- Reconcile lost in-memory connector syncs by probing connector status and auto-resuming or failing bounded attempts.
- Improve sync lifecycle logging around triggers, stale updates, resume attempts, and scheduler phases.
- Auto-complete successful non-realtime Rust SDK syncs and pin sqlx-cli for migrator builds.

Fix dependabot alerts

Fix anthropic bedrock provider (#221)

Add workflows to build paperless and nextcloud connectors

Add Microsoft Entra ID SSO support (#100)

Include metadata.extra in search tool response

Disable branch-sha image tag on tag pushes