Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Add a channel-based semaphore (SPINDLE_SERVER_MAX_CONCURRENT_WORKFLOWS,
default 8) that blocks workflow goroutines from starting a container until
a slot is free. Each workflow acquires a slot before SetupWorkflow and
releases it on exit via defer.

Combined with the 6 GiB per-container limit (MAX_JOB_MEMORY_MB), this
bounds total container memory to ~48 GiB on the current 64 GiB host.
MAX_JOB_COUNT still controls pipeline-level concurrency at the queue.
Without this semaphore, max workflows were effectively unbounded and
(wrongly) assumed to be capped at MAX_JOB_COUNT.

Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

Signed-off-by: Felix Schneider <did:plc:pbjvqaziagcyv2vqodldn5op>

If session has expired, start auth flow.

Signed-off-by: Seongmin Lee <git@boltless.me>

Lewis: May this revision serve well! <lewis@tangled.org>

Signed-off-by: Carl 'Subzidion' Hiltbrunner <git@carl.hiltbrunner.email>

Lewis: May this revision serve well! <lewis@tangled.org>

Lewis: May this revision serve well! <lewis@tangled.org>

Lewis: May this revision serve well! <lewis@tangled.org>

Lewis: May this revision serve well! <lewis@tangled.org>

Lewis: May this revision serve well! <lewis@tangled.org>

Lewis: May this revision serve well! <lewis@tangled.org>

Lewis: May this revision serve well! <lewis@tangled.org>

Lewis: May this revision serve well! <lewis@tangled.org>

Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

Signed-off-by: oppiliappan <me@oppi.li>

caused funky behavior with popups

Signed-off-by: oppiliappan <me@oppi.li>

also removes the gray shield indicator for profiles that are not vouched
for.

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

drop-shadow seems to create a new stacking context and that messes with
z-index

Signed-off-by: oppiliappan <me@oppi.li>