per-app hardening setting improvements

static/releases.html

@@ -721,6 +721,10 @@
 
                     <ul>
                         <li>improve compatibility of the opt-in forced hardware memory tagging mode for user installed apps</li>
+                        <li>add AppCompatConfig for out-of-band updates to app compatibility configuration</li>
+                        <li>suppress native debugging notification for sandboxed Google Play services since it works without it</li>
+                        <li>Settings: hide global memory tagging setting from secondary users</li>
+                        <li>Settings: add toggle for system process crash notifications and disable it by default since it uncovers a lot of upstream bugs</li>
                     </ul>
                 </article>
                 -->