docs: Add Trino improvements

Author: Techassi

modules/ROOT/partials/release-notes/release-26.3.adoc

@@ -172,6 +172,17 @@ The Entra User Info Fetcher (UIF) backend has been stabilized with the introduct
 Conversion between v1alpha1 and v1alpha2 is handled automatically by default.
 Implemented in https://github.com/stackabletech/opa-operator/pull/801[opa-operator#801].
 
+===== Trino
+
+*Breaking:* The operator no longer sets `opa.policy.column-masking-uri` in `access-control.properties` but `opa.policy.batch-column-masking-uri` instead, allowing Trino to fetch multiple column masks in a single request.
+This therefore now requires a `batchColumnMasks` rule to be present in the OPA Trino rules, when using the default URI set by the trino-operator.
+
+* The above default can be disabled with the new enableColumnMasking field in the opa configuration in authorization
+* *Breaking:* The field opa in authorization is now a mandatory enum variant instead of being optional
+* Quick note: Use `spec.clusterConfig.authorization.opa.enableColumnMasking: false` instead of `batchColumnMasks = []`
+
+See https://github.com/stackabletech/trino-operator/issues/814[trino-operator#814].
+
 
 ==== Supported versions