docs: update CHANGELOG with 12 PRs merged May 11

[OneStepAt4time]

Summary

Adds 12 PRs merged May 11 to the CHANGELOG that were missing from the initial update (#3175).

Added (3)

• feat(dashboard): budget progress bars and spend summary #3183 — Dashboard budget progress bars and spend summary
• feat(telegram): forward full CC output in verbose mode #3196 — Telegram verbose mode (full CC output forwarding)
• feat(dashboard): i18n string extraction for 7 remaining pages #3192 — Dashboard i18n string extraction for 7 pages

Fixed (4)

• fix(security): add RBAC requireRole guards to templates and tools endpoints (#3185, #3186) #3187 — RBAC requireRole guards on templates and tools endpoints
• fix: shutdown ACP backend on session kill to reap CC child processes (#3184) #3191 — Shutdown ACP backend on session kill to reap orphaned processes
• fix(dashboard): i18n aria-labels and title attributes for 3 pages #3195 — Dashboard i18n aria-labels and title attributes
• chore: export security helpers, fix indentation, cache redactError #3177 — Security helpers cleanup (export, indentation, cache)

Documentation (5)

• docs: update competitive threat matrix with deep dive findings #3176 — Competitive threat matrix deep dive + counter-moves
• docs(blog): Why Enterprise-Grade Orchestration Matters #3179 — Blog: Why Enterprise-Grade Orchestration Matters
• docs: add RBAC role tables to templates and tools endpoints #3188 — RBAC role tables for templates/tools endpoints
• docs: update RBAC viewer role description after #3187 guards #3193 — RBAC viewer role description update
• docs: add Telegram verbose mode (tgVerbose / AEGIS_TG_VERBOSE) #3197 — Telegram verbose mode docs

Test plan

• Verify no duplicate entries with existing changelog content
• All 12 PRs correctly categorized

[aegis-gh-agent]

✅ Approved. All 12 missing entries added to correct CHANGELOG sections. Matches the audit results exactly. CI green. Merging.