chore: release v1.17.0

[EhabY]

Release v1.17.0: bumps package.json to 1.17.0 and cuts the changelog's Unreleased section as the v1.17.0 release. It's a minor bump because of the new startup script warnings, the log flush on unreachable servers, and the session app name reporting.

Changes

• package.json: version 1.16.4 → 1.17.0
• CHANGELOG.md: ## Unreleased → ## [v1.17.0](https://github.com/coder/vscode-coder/releases/tag/v1.17.0) 2026-10-13
• CHANGELOG.md: merges the duplicate ### Fixed headings left by the security fix into one section, with the OAuth entries grouped first
• CHANGELOG.md: adds the missing entries for feat: report actual IDE for session tracking #1136, fix: apply SSH tuning settings per provider #1146, and chore(deps): bump the npm-minor-patch group and fix Windows include escaping #1131

Changelog audit (v1.16.4...main)

PR	Changelog
#1129 startup script warnings	Added
#1132 flush logs when a server is unreachable	Added
#1136 report the actual IDE for session tracking	Changed (added in this PR)
#1138, #1147 OAuth scopes, session replacement, and credential handling	Fixed
Security advisory fix (b738dbe): deployment values kept out of local command execution	Fixed
#1146 SSH tuning per provider	Fixed (added in this PR)
#1131 Windows Include escaping	Fixed (added in this PR)
#1150 last startup log line wrapping	None: adjusts the unreleased #1129 warning
#1127 handshake status from public events	None: internal refactor, same fallback and retry behavior
#1144 flight recorder flush	None: refactor, no behavior change
#1130, #1133, #1134, #1137, #1142	None: tooling, tests, refactors, and dependency bumps

Notes

• The release tag must point at a commit where package.json reads 1.17.0. release.yaml validates the tag against package.json and requires it to be an ancestor of origin/main.

[matifali]

Just a minor nit but LGTM.