…#16927)

Cherry-picked fix: remove provisioners from deployment sidebar (#16717)

Provisioners should be only under orgs. This is a left over from a
previous provisioner refactoring.

closes #16921

Co-authored-by: Bruno Quaresma <bruno@coder.com>

…ick #16691) (#16793)

Cherry-picked chore: use org-scoped roles for organization groups and
members e2e tests (#16691)

Co-authored-by: ケイラ <mckayla@hey.com>

Cherry-picked fix: fix audit log search (#16944)

Co-authored-by: ケイラ <mckayla@hey.com>

…16832)

Cherry-picked fix: hide deleted users from org members query (#16830)

Co-authored-by: ケイラ <mckayla@hey.com>

…16790)

Cherry-picked fix: fix deployment settings navigation issues (#16780)

Co-authored-by: ケイラ <mckayla@hey.com>

Cherry-picked chore: fix gpg forwarding test (#17355)

Co-authored-by: Dean Sheather <dean@deansheather.com>

#17363) (#17420)

Cherry-picked fix: reduce excessive logging when database is unreachable
(#17363)

Fixes #17045

---------

Signed-off-by: Danny Kopping <dannykopping@gmail.com>

Signed-off-by: Danny Kopping <dannykopping@gmail.com>
Co-authored-by: Danny Kopping <danny@coder.com>

…ests (cherry-pick #17362) (#17493)

Cherry-picked feat: add path & method labels to prometheus metrics for
current requests (#17362)

Closes: #17212

Co-authored-by: Michael Suchacz <203725896+ibetitsmike@users.noreply.github.com>

Co-authored-by: Steven Masley <Emyrk@users.noreply.github.com>

…(cherry-pick #17405) (#17423)

Co-authored-by: Steven Masley <Emyrk@users.noreply.github.com>

…etadata (cherry-pick #17535) (#17538)

Co-authored-by: Mathias Fredriksson <mafredri@gmail.com>

Co-authored-by: Charlie Voiselle <464492+angrycub@users.noreply.github.com>

…ry-pick #17878) (#17962)

Cherry-picked fix: stop extending API key access if OIDC refresh is
available (#17878)

fixes #17070

Cleans up our handling of APIKey expiration and OIDC to keep them
separate concepts. For an OIDC-login APIKey, both the APIKey and OIDC
link must be valid to login. If the OIDC link is expired and we have a
refresh token, we will attempt to refresh.

OIDC refreshes do not have any effect on APIKey expiry.

#17070 (comment)
explains why this is the correct behavior.

Co-authored-by: Spike Curtis <spike@coder.com>