…onal#56017)

```
 panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x20 pc=0x5af856fc3494]

goroutine 62984 [running]:
github.com/gravitational/teleport/lib/backend/firestore.(*Backend).Items.func3-range1(0xc0001991f0, {0x0?, 0x0?})
        github.com/gravitational/teleport/lib/backend/firestore/firestorebk.go:586 +0x134
github.com/gravitational/teleport/lib/backend/firestore.(*Backend).Items.func3.(*Backend).mergedRecords.2-range1(0x5af85ed273a0?, {0x0, 0x0?})
        github.com/gravitational/teleport/lib/backend/firestore/firestorebk.go:655 +0x4f
github.com/gravitational/teleport/lib/itertools/stream.MergeStreams[...].func1()
        github.com/gravitational/teleport/lib/itertools/stream/stream.go:378 +0x236
github.com/gravitational/teleport/lib/backend/firestore.(*Backend).Items.func3.(*Backend).mergedRecords.2(0xc000e52500)
        github.com/gravitational/teleport/lib/backend/firestore/firestorebk.go:654 +0x89b
github.com/gravitational/teleport/lib/backend/firestore.(*Backend).Items.func3(0xc003bb4cc0)
        github.com/gravitational/teleport/lib/backend/firestore/firestorebk.go:579 +0x3bf
```

The above panic is caused by the snapShot not being set and thus
resulting in a nil dereference. The snapShot is now assigned outside
of the switch to ensure that all records that are successfully
created contain a reference to a valid DocumentSnapshot.

…nal#55433)

* Add support for rocky and almalinux to CDN install script

Extends gravitational#44171

* Add rocky and alma as search keywords on discover page

* Add rocky and alma as search keywords on discover page

* Fix prettier

* Fix prettier

* Add info to tsh tests

* Specify session id

…al#55693)

We had been updating the client activity tracker any time a message
was sent from the client (browser or Teleport Connect) to the remote
host. This approach was fine for the original RDP implmentation, as
all messages sent in this direction were for user input (keypresses,
mouse movement, scroll wheel, etc), but it is insufficient with the
current RemoteFX implementation as there are some messages sent by
the remote Windows hosts which require client acknowledgements.
These acknowledgements were mistakenly being counted as client activity.

Closes gravitational#55691

…mplete (gravitational#56020)

* [vnet] fix: close proxied channel after source channel terminates

* buffer error chan, avoid unecessary error wrap

…ops more complex than CRUD (gravitational#55078)

* adding Manager for RecordingEncryption resources that handles shared ops more complex than CRUD

* adding age plugin wrapping default X25519 Identity/Recipient implementation with hooks to more efficiently lookup private keys given their respective public key

* Add SSO MFA support for desktop access.

* Update lib/web/desktop.go

Co-authored-by: Przemko Robakowski <przemko.robakowski@goteleport.com>

* Address style comments.

---------

Co-authored-by: Przemko Robakowski <przemko.robakowski@goteleport.com>

…#56056)

* Add Sigstore to workload attestation reference

* Remove replaced page

* Remove duplicated paragraph

* Fix old redirect