docs(releases): author the 17.1.0 section on the v17 page (#10232) (#10271)

17.1.0 was published to the `latest` tag on 2026-08-20 with a 69-package
version-locked train, and the curated docs did not move with it: the v17
page's heading spine ended at the rc.6 "Landed since" blocks, its
release-status blockquote still named 17.0.0 as what `latest` carries, and
the releases index still claimed `current series: 17.0.0`.

Follows the v16 page's treatment of 16.1 — the convention already on the
page: a `## Highlights — 17.1.0` block beside the 17.0.0 one, a
`# What's new in 17.1.0` division after the 17.0.0 detail, a `### 17.1.0`
upgrade checklist, and a `**17.1.0**` references paragraph. The paired
`# 17.0.0 in detail` divider is added for the same reason v16 carries one:
without it the new H1 would leave the preceding H2s nesting under nothing.

Contents derived from the 69 package `CHANGELOG.md` sections under
`## 17.1.0` — 314 distinct entries (111 minor, 203 patch, no major) after
deduplicating the text changesets repeat across every package they bump.
Every substantive claim traces to a named entry; changes whose changelog
text could not establish what they do are left out rather than described.

Fixes #10232


Claude-Session: https://claude.ai/code/session_01DdCnBGcHeufjrq7drTD3wt

Co-authored-by: Claude <noreply@anthropic.com>

Author: os-zhuang

content/docs/releases/index.mdx

@@ -18,7 +18,7 @@ migration steps, then covers new capabilities and notable fixes.
 
 ## Versions
 
-- [v17.0.0](/docs/releases/v17) — Files become owned `sys_file` records with server-enforced `accept`/`maxSize` and a governed download path, bulk export becomes its own opt-in privilege, the SDK is reconciled against the routes the server actually mounts (21 dead methods out, 40+ real ones in), approval nodes route approvers dynamically via CEL expressions and decision outputs, a datasource that cannot connect fails the boot, and Node 22 becomes the supported floor (current series: 17.0.0, released 2026-08-14).
+- [v17.0.0](/docs/releases/v17) — Files become owned `sys_file` records with server-enforced `accept`/`maxSize` and a governed download path, bulk export becomes its own opt-in privilege, the SDK is reconciled against the routes the server actually mounts (21 dead methods out, 40+ real ones in), approval nodes route approvers dynamically via CEL expressions and decision outputs, a datasource that cannot connect fails the boot, and Node 22 becomes the supported floor; 17.1 adds partial field masking, record-view auditing on `sys_audit_log`, and a per-object read-only approval visibility tier — and makes a deactivated permission set or position actually stop granting access, withdraws the bulk-export wildcard from the shipped admin sets, and gives all three flow doors one honest HTTP status table (current series: 17.1.0, released 2026-08-20).
 - [v16.0.0](/docs/releases/v16) — One org identifier (`organizationId`) across hooks and actions, quorum + per-group sign-off (会签) approvals with metadata-declared decision actions, time-relative automations, filtered roll-ups, strict dashboard widgets, an identity-scoped MCP stdio transport, and a platform-wide enforce-or-remove sweep that makes dead metadata loud; 16.1 adds a `requires` capability-provider preflight, two more dashboard build gates, and `runAs:'user'` automations that run with the triggering user's real grants (final release: 16.1.0).
 - [v15.0.0](/docs/releases/v15) — Explain record access layer by layer, a docked AI workspace in the Console, project-ready Gantt charts, and phone sign-in; 15.1 adds permission-following attachments, no-code third-party connectors, dashboard-wide filters, pinyin search, and whole-record inline editing — with materially safer multi-tenant and write-path defaults (final release: 15.1.1).
 - [v14.0.0](/docs/releases/v14) — ADR-0090 vocabulary convergence completed, object `enable.*` flags become real gates, admin user management, phone/SMS auth, book-audience enforcement, data-lifecycle contract, and effective-dated grants (final release: 14.8.0).