GT AI OS Community Edition v2.0.33

Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/tenant-app/src/app/observability/page.tsx

@@ -0,0 +1,31 @@
+'use client';
+
+import { AppLayout } from '@/components/layout/app-layout';
+import { AuthGuard } from '@/components/auth/auth-guard';
+import { usePageTitle } from '@/hooks/use-page-title';
+import { ObservabilityDashboard } from '@/components/observability/observability-dashboard';
+
+/**
+ * Observability Dashboard Page
+ * Available to all authenticated users with role-based data filtering:
+ * - Admins/Developers: See all platform activity with user filtering
+ * - Analysts/Students: See only their personal activity
+ *
+ * Features:
+ * - Overview metrics (conversations, messages, tokens, users)
+ * - Time series charts for usage trends
+ * - Breakdown by user, agent, and model
+ * - Full conversation browser with content viewing
+ * - CSV/JSON export functionality
+ */
+export default function ObservabilityPage() {
+  usePageTitle('Observability');
+
+  return (
+    <AuthGuard>
+      <AppLayout>
+        <ObservabilityDashboard />
+      </AppLayout>
+    </AuthGuard>
+  );
+}