release: 1.6.0

Add 30-day send statistics and auto level-2 rate limits on the domain page. Close Unreleased; pin compose and docs to 1.6.0.

Co-authored-by: Cursor <cursoragent@cursor.com>

internal/app/service.go

@@ -202,14 +202,10 @@ func (s *Service) RateLimit(appID int64) (store.RateLimit, bool, error) {
 // SaveRateLimit stores the application-level trusted-IP override (guide § Rate
 // limiting). The caller has validated the IPs and numbers (security.md); the
 // milter reads the row live, so no reload is needed.
-func (s *Service) SaveRateLimit(appID int64, ips []string, maxMessages, windowSeconds int) error {
-	return s.store.SetRateLimit(store.RateLimit{
-		Scope:         store.RateLimitScopeApp,
-		RefID:         appID,
-		AllowedIPs:    ips,
-		MaxMessages:   maxMessages,
-		WindowSeconds: windowSeconds,
-	})
+func (s *Service) SaveRateLimit(appID int64, rl store.RateLimit) error {
+	rl.Scope = store.RateLimitScopeApp
+	rl.RefID = appID
+	return s.store.SetRateLimit(rl)
 }
 
 // ClearRateLimit removes the application-level rate limit (guide § Rate