chore(v8): release 8.22.0

[github-actions]

🤖 I have created a release beep boop

8.22.0 (2026-09-08)

Features

• Adopt go-server-sdk v7.17.0 so an upstream 401 retries (#856) (e152af7)

Bug Fixes

• autoconfig: refresh stored environment defaults on update (SEC-9484) (#842) (e04e3e2)
• deps: bump golang.org/x/crypto to v0.55.0 for CVE-2026-56854 (#848) (360d624)
• deps: bump golang.org/x/crypto to v0.56.0 for CVE-2026-78662 and CVE-2026-56855 (#854) (6d5d346)
• deps: bump supported Go versions to 1.27.0 and 1.26.7 (#837) (9b4fb46)
• deps: bump supported Go versions to 1.27.1 and 1.26.8 (#852) (4b06ed6)
• emit Vary: Origin on CORS responses (SEC-9501) (#844) (78a8f05)
• streams: treat a nil replay result as no event instead of panicking (#845) (7d7eace)

---

This PR was generated with Release Please. See documentation.

---

Note

Overview
This Release Please PR cuts v8.22.0 by bumping the version from 8.21.0 to 8.22.0 in .release-please-manifest.json, relay/version/version.go, and adding the 8.22.0 section to CHANGELOG.md.

The new changelog entry documents what ships in this tag: adopting go-server-sdk v7.17.0 for upstream 401 retries; autoconfig refresh of stored environment defaults on update (SEC-9484); CORS Vary: Origin (SEC-9501); a streams nil-replay panic fix; and dependency bumps (golang.org/x/crypto, supported Go 1.27.x / 1.26.x).

^{Reviewed by Cursor Bugbot for commit 8e511e2. Bugbot is set up for automated code reviews on this repo. Configure here.}