patches: add v1.8.0 series and register it as latest

Rebase the de-brand + dark-theme series onto upstream v1.8.0 and make it
the highest entry in the support matrix.

v1.8.0 adds an IAM section to the admin UI — iam.html, iam-users.html,
iam-roles.html, iam-oidc.html and js/iam-ui.js — and rewrites much of the
existing pages, so the series needed real work rather than a clean replay:

* Sidebar conflict (buckets/dashboard/explorer/users). Upstream inserted
  an "Identity & Access" nav group exactly where the de-brand patch
  deletes the "Resources" block, so all four pages conflicted. Resolved
  by keeping the new IAM nav and dropping Resources, along with the
  divider that only existed to separate the two — matching the original
  patch, which likewise left no trailing rule at the end of the nav.

* The four new IAM pages carry full Versity branding and were not covered
  by the old series. Extended the de-brand patch to give them the same
  treatment: tab title, favicon, sidebar wordmark, page heading, and
  removal of the Resources links. The OIDC client-ID placeholder
  sts.versity.local becomes sts.example.local, matching the neutral
  token.example.com placeholder upstream already uses in that same form.

* Dark theme needed one new rule. Audited every color utility in the new
  IAM markup against the override layer: all were already covered except
  group-hover:bg-gray-200 on the IAM overview cards' icon chip, which
  would flash near-white on card hover. Added it next to the existing
  hover:bg-gray-200 override.

Left alone deliberately: internal JS identifiers and code comments
(class VersityAPI, "Maximum parts allowed by VersityGW"), which are not
visible branding and which the series has never touched; and the
per-file Apache-2.0 headers, kept for license compliance.

The series touches webui/ only — 961 files after apply, which is v1.8.0's
959 plus favicon.svg and four font files, less the three Versity PNGs.

Verified: ci/clone-source.sh + ci/apply-patches.sh apply the exported
series to a pristine v1.8.0 with no 3-way fallback, producing a tree
byte-identical to the one developed here, and ./cmd/versitygw (the
goreleaser target) builds clean from it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

README.md

@@ -80,6 +80,7 @@ Currently maintained:
 
 | Upstream tag | Patch set     | Contents                                                  |
 |--------------|---------------|-----------------------------------------------------------|
+| `v1.8.0`     | `v1.8.0/`     | `0001-webui-debrand.patch`, `0002-webui-dark-theme.patch` |
 | `v1.7.0`     | `v1.7.0/`     | `0001-webui-debrand.patch`, `0002-webui-dark-theme.patch` |
 | `v1.6.0`     | `v1.6.0/`     | `0001-webui-debrand.patch`, `0002-webui-dark-theme.patch` |
 | `v1.5.0`     | `v1.5.0/`     | `0001-webui-debrand.patch`                                |
@@ -87,7 +88,8 @@ Currently maintained:
 ### What the de-brand patch does
 
 - Sidebar/login logos → a plain **"S3 Gateway"** wordmark.
-- Page titles: "VersityGW Dashboard" → "Dashboard" (Buckets/Users/Explorer too).
+- Page titles: "VersityGW Dashboard" → "Dashboard" (Buckets, Users,
+  Explorer and the v1.8.0 IAM pages too).
 - Browser tab titles → "S3 Gateway – …".
 - Removes the sidebar **Resources** section (external `github.com/versity` links).
 - Replaces the Versity favicon with a neutral SVG; deletes the Versity logo PNGs.
@@ -119,8 +121,8 @@ shared asset files plus bundled fonts:
   matching the existing self-hosted Roboto.
 
 The only markup change is the login page's light background gradient,
-which becomes a solid dark surface. Currently applied to `v1.6.0` and
-`v1.7.0`.
+which becomes a solid dark surface. Currently applied to `v1.6.0`,
+`v1.7.0` and `v1.8.0`.
 
 ## Adding / refreshing a version
 

ci/support-matrix.yaml

@@ -12,6 +12,8 @@
 #   patches  directory under patches/ to apply (defaults to `tag`)
 
 versitygw:
+  - tag: v1.8.0
+    patches: v1.8.0
   - tag: v1.7.0
     patches: v1.7.0
   - tag: v1.6.0