docs(releases): compile the v17 release page for the 17.0.0 cut (#8642)

* docs(releases): compile the v17 release page for the 17.0.0 cut

v17 development is complete, so the release page is brought up to the
state of the train.

Closes the `rc.5` window against the cut that consumed it. That window
was written as open against 135 pending changesets; the `rc.6` cut
(2026-08-10) released 425 — 36 major-class, 123 minor, 266 patch — the
largest round of the train. Adds the landings that arrived between the
draft and the cut: the single driver vocabulary (`mongo` → `mongodb`),
the ADR-0045 publish gate's own machine-managed key, the doors that were
open only by omission (`resumeAuthority`, runtime `api` create,
`registerHook` empty target), and the enforce-or-remove tail across
notifications, export field meta, import, aggregation, action and SDUI
surfaces. The Console pin move is marked released.

Adds the `Landed since 17.0.0-rc.6` window — 374 pending changesets, 11
major-class, 99 minor, 264 patch — compiled from the changesets pending
against `.changeset/pre.json`. Its spine is the credential story: inline
credentials, URL-embedded userinfo and `${…}` placeholders are refused
at publish, the two dead credential-sink families are removed, and what
was already stored is encrypted, redacted or marked `internal`. Also
covers the driver-text disclosure class, per-organization uniqueness,
the `$field` cross-field comparison, closed query-parameter ingress, the
audit trail's missing writers, and the three Console pin moves.

Extends the upgrade checklist with the new breaking work — credentials
first, then driver names, memory-driver tenancy, unknown query
parameters, MongoDB `$contains` case sensitivity, `view.exportOptions`,
runtime field creation, cross-tenant uninstall, number `scale` — and
adds `rc.2` and `rc.6` reference lines.

Docs-only; releases nothing, so it takes `skip-changeset`.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QHzpjYCoTY4SgaiNRV3b52

* docs(releases): keep the ADR-0090 D3 role-word count flat

The new security-corrections entry for #8317 named the membership field
directly, which added a third occurrence of the banned word to a file
baselined at two. The baseline is shrink-only and `--update` is a
maintainer action, so the entry is rephrased instead: it now uses the
page's own ADR-0108 vocabulary, "membership grade", which is what the
sentence was describing anyway.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QHzpjYCoTY4SgaiNRV3b52

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: Jack Q