chore: release v1.23.0-beta.3

[Soju06]

Summary

• Prepares beta release v1.23.0-beta.3 for the 1.23.0 stable train.
• Updates release-managed version files only; release-please remains the stable release owner.
• Merging this PR will publish v1.23.0-beta.3 only after the release-candidate validation checklist below is completed for this exact candidate SHA.
• Synced automatically from release-please PR chore(main): release 1.23.0 #1472; no manual beta workflow dispatch is required.

Changes since v1.23.0-beta.2

• fix(proxy): extend websocket stream budget (fix(proxy): extend websocket stream budget #1353) (de2c5fc)
• fix(proxy): preserve fresh bridge full resends (fix(proxy): preserve fresh bridge full resends #1486) (
  b5a515)
• feat(ui): complete zh-CN dashboard translations (feat(ui): complete zh-CN dashboard translations #1436) (
  79a42c)
• fix(auth): restrict guest access to sensitive request data (fix(auth): restrict guest access to sensitive request data #1497) (
  73aa50)
• fix(reports): use local days for daily averages (fix(reports): use local days for daily averages #1525) (
  eefce1)
• fix(helm): calculate aggregate 5xx error rate (fix(helm): calculate aggregate 5xx error rate #1522) (
  b883d6)
• fix(db): correct PostgreSQL pool budget (fix(db): correct PostgreSQL pool budget #1519) (
  68a2bc)
• fix(http-bridge): wait before retrying model capacity (fix(http-bridge): wait before retrying model capacity #1395) (
  448b23)
• fix(proxy): release idle bridge sessions' account stream leases (fix(proxy): release idle bridge sessions' account stream leases #1476) (

• fix(proxy): spill unanchored forks on account caps (fix(proxy): spill unanchored forks on account caps #1499) (

• fix(proxy): attribute bridge failure fan-out request logs to each request's API key (fix(proxy): attribute bridge failure fan-out request logs to each request's API key #1540) (
  3fe0d6)
• fix(cost): openai updates the terra and luna's cost (fix(cost): openai updates the terra and luna's cost #1553) (
  c1d189)
• feat(proxy): add durable capability lineage for reconnect (feat(proxy): add durable capability lineage for reconnect #1562) (
  151c42)
• fix(proxy): surface forwarded compact settlement failures (fix(proxy): surface forwarded compact settlement failures #1561) (
  2176b1)
• feat(helm): allow Grafana dashboard title overrides (feat(helm): allow Grafana dashboard title overrides #1482) (
  266fbe)
• feat(ui): separate service and usage health status (feat(ui): separate service and usage health status #1495) (
  6b1f47)
• feat(ui): warn when request log retention is disabled (feat(ui): warn when request log retention is disabled #1496) (
  d2dc91)
• feat(dashboard): Add conversation list on dashboard and details dialog (feat(dashboard): Add conversation list on dashboard and details dialog #1477) (
  c539a2)
• fix(http-bridge): stabilize silent and clean-close recovery (fix(http-bridge): stabilize silent and clean-close recovery #1394) (
  a66f79)
• fix(proxy): sequence websocket health after settlement (fix(proxy): sequence websocket health after settlement #1558) (
  d77011)
• fix(cache): recover invalidation after failed prime (fix(cache): recover invalidation after failed prime #1544) (
  ba5a28)
• fix(proxy-responses): tolerate structured content type values (fix(proxy-responses): tolerate structured content type values #1566) (
  8600a6)
• fix(proxy): preserve terminal delivery across detach (fix(proxy): preserve terminal delivery across detach #1527) (
  4694a5)
• fix(compact): elide observed inline images at wire cap (fix(compact): elide observed inline images at wire cap #1457) (
  8d154e)
• fix(proxy): classify tool-search missing-tool-output rejections (fix(proxy): classify tool-search missing-tool-output rejections #1531) (

• fix(proxy): keep upstream request-shape rejections account neutral (fix(proxy): keep upstream request-shape rejections account neutral #1532) (
  24d12f)
• fix(proxy): preserve websocket connect errors (fix(proxy): preserve websocket connect errors #1517) (
  2ba5f9)

Release-candidate validation

Validated candidate: 04285c1

Complete these checks on the exact candidate SHA above before merging. The beta release guard and publish workflow fail while any item remains unchecked or the SHA is stale.

• Backend/unit/integration gates
• Frontend tests/build
• Wheel/package validation
• Docker/container smoke
• Live upstream/account smoke
• Live upstream/account smoke not required

Install after publish

uvx --from "codex-lb==1.23.0b3" codex-lb
docker pull ghcr.io/Soju06/codex-lb:1.23.0-beta.3
helm install codex-lb oci://ghcr.io/soju06/charts/codex-lb --version 1.23.0-beta.3 --devel

Promotion

Merge the normal release-please PR to promote this beta-tested train to 1.23.0.