#296 chore(changelog): refile post-0.17.1 entries under Unreleased; credit the merge wave

[Anonymous]

Originally created by: fu351

Slice

• Chore: post-release bookkeeping after today's merge wave

What this PR does

Two entries merged after the v0.17.1 tag (#285's 2fa reset-lockout, [#281]'s AN-4a timeout reporting) had their CHANGELOG bullets sitting under the ## 0.17.1 heading, misstating what the released artifacts contain. This moves them under ## Unreleased (merged since v0.17.1), adds bullets for the rest of today's merges (#286, [#273], [#280], [#279], [#276], [#295]), and adds @Maqbool61 to CONTRIBUTORS.md for [#273].

Tests added (run in CI)

• None: docs-only (CHANGELOG.md, CONTRIBUTORS.md).

Security checklist

• [x] Fails closed on error / uncertainty (N/A, docs-only)
• [x] No secret, full file, or unredacted prompt logged or committed
• [x] Any guardrail/learning change is raise-only (no guardrail change)
• [x] Every BLOCK/AUTH carries reason codes + a human explanation (N/A)

Edge cases covered / Deviations from plan / Risks introduced

• None. NanoRisk6 deliberately stays uncredited in CONTRIBUTORS.md pending the identity question already on record.

🤖 Generated with Claude Code

[Anonymous]

Ticket changed by: fu351

• status: open --> closed