Add Security and Governance filter categories

Added two new filter categories to better organise documentation:
- Security: for encryption, authentication, and authorisation guides
- Governance: for compliance and validation guides

Changes:
- Added 'security' tag to: Proxy guide, Record Encryption quickstart/guide,
  OAuth Bearer Validation, SASL Inspection, and Authorization guides
- Added 'governance' tag to: Record Validation Guide
- Removed overly-specific 'record-encryption' and 'encryption-at-rest' tags
- Added Security and Governance filter buttons with shield-lock and
  check-square-fill icons respectively
- Updated icon mapping and CSS border styles for new categories
- Applied changes to versions 0.16.0 through 0.19.0

Assisted-by: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: tombentley

_data/documentation/0_16_0.yaml

@@ -9,14 +9,14 @@ docs:
     description: "Covers using the proxy, including configuration, security and operation."
     tags:
       - proxy
+      - security
     rank: '010'
     path: html/kroxylicious-proxy
   - title: Record Encryption quickstart
     description: Shows how to use the proxy to provide an encryption at rest solution
       for Apache Kafka
     tags:
-      - record-encryption
-      - encryption-at-rest
+      - security
     rank: '011'
     path: html/record-encryption-quickstart
   - title: Kroxylicious Operator for Kubernetes
@@ -31,12 +31,14 @@ docs:
       \ security and operation."
     tags:
       - filter
+      - security
     rank: '020'
     path: html/record-encryption-guide
   - title: Record Validation Guide
     description: Covers using the record validation filter.
     tags:
       - filter
+      - governance
     rank: '021'
     path: html/record-validation-guide
   - title: Multi-tenancy Guide
@@ -49,6 +51,7 @@ docs:
     description: Covers using the Oauth Bearer validation filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/oauth-bearer-validation
   - title: Developer Quick Start

_data/documentation/0_17_0.yaml

@@ -9,14 +9,14 @@ docs:
     description: "Covers using the proxy, including configuration, security and operation."
     tags:
       - proxy
+      - security
     rank: '010'
     path: html/kroxylicious-proxy
   - title: Record Encryption quickstart
     description: Shows how to use the proxy to provide an encryption at rest solution
       for Apache Kafka
     tags:
-      - record-encryption
-      - encryption-at-rest
+      - security
     rank: '011'
     path: html/record-encryption-quickstart
   - title: Kroxylicious Operator for Kubernetes
@@ -31,12 +31,14 @@ docs:
       \ security and operation."
     tags:
       - filter
+      - security
     rank: '020'
     path: html/record-encryption-guide
   - title: Record Validation Guide
     description: Covers using the record validation filter.
     tags:
       - filter
+      - governance
     rank: '021'
     path: html/record-validation-guide
   - title: Multi-tenancy Guide
@@ -49,12 +51,14 @@ docs:
     description: Covers using the SASL Inspection filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/sasl-inspection-guide
   - title: Oauth Bearer Validation Guide
     description: Covers using the Oauth Bearer validation filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/oauth-bearer-validation
   - title: Developer Quick Start

_data/documentation/0_17_1.yaml

@@ -9,14 +9,14 @@ docs:
     description: "Covers using the proxy, including configuration, security and operation."
     tags:
       - proxy
+      - security
     rank: '010'
     path: html/kroxylicious-proxy
   - title: Record Encryption quickstart
     description: Shows how to use the proxy to provide an encryption at rest solution
       for Apache Kafka
     tags:
-      - record-encryption
-      - encryption-at-rest
+      - security
     rank: '011'
     path: html/record-encryption-quickstart
   - title: Kroxylicious Operator for Kubernetes
@@ -31,12 +31,14 @@ docs:
       \ security and operation."
     tags:
       - filter
+      - security
     rank: '020'
     path: html/record-encryption-guide
   - title: Record Validation Guide
     description: Covers using the record validation filter.
     tags:
       - filter
+      - governance
     rank: '021'
     path: html/record-validation-guide
   - title: Multi-tenancy Guide
@@ -49,12 +51,14 @@ docs:
     description: Covers using the SASL Inspection filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/sasl-inspection-guide
   - title: Oauth Bearer Validation Guide
     description: Covers using the Oauth Bearer validation filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/oauth-bearer-validation
   - title: Developer Quick Start

_data/documentation/0_18_0.yaml

@@ -9,14 +9,14 @@ docs:
     description: "Covers using the proxy, including configuration, security and operation."
     tags:
       - proxy
+      - security
     rank: '010'
     path: html/kroxylicious-proxy
   - title: Record Encryption quickstart
     description: Shows how to use the proxy to provide an encryption at rest solution
       for Apache Kafka
     tags:
-      - record-encryption
-      - encryption-at-rest
+      - security
     rank: '011'
     path: html/record-encryption-quickstart
   - title: Kroxylicious Operator for Kubernetes
@@ -31,12 +31,14 @@ docs:
       \ security and operation."
     tags:
       - filter
+      - security
     rank: '020'
     path: html/record-encryption-guide
   - title: Record Validation Guide
     description: Covers using the record validation filter.
     tags:
       - filter
+      - governance
     rank: '021'
     path: html/record-validation-guide
   - title: Multi-tenancy Guide
@@ -49,12 +51,14 @@ docs:
     description: Covers using the SASL Inspection filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/sasl-inspection-guide
   - title: Oauth Bearer Validation Guide
     description: Covers using the Oauth Bearer validation filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/oauth-bearer-validation
   - title: Developer Quick Start

_data/documentation/0_19_0.yaml

@@ -9,14 +9,14 @@ docs:
     description: "Covers using the proxy, including configuration, security and operation."
     tags:
       - proxy
+      - security
     rank: '010'
     path: html/kroxylicious-proxy
   - title: Record Encryption quickstart
     description: Shows how to use the proxy to provide an encryption at rest solution
       for Apache Kafka
     tags:
-      - record-encryption
-      - encryption-at-rest
+      - security
     rank: '011'
     path: html/record-encryption-quickstart
   - title: Kroxylicious Operator for Kubernetes
@@ -31,12 +31,14 @@ docs:
       \ security and operation."
     tags:
       - filter
+      - security
     rank: '020'
     path: html/record-encryption-guide
   - title: Record Validation Guide
     description: Covers using the record validation filter.
     tags:
       - filter
+      - governance
     rank: '021'
     path: html/record-validation-guide
   - title: Multi-tenancy Guide
@@ -49,18 +51,21 @@ docs:
     description: Covers using the Oauth Bearer validation filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/oauth-bearer-validation
   - title: SASL Inspection Guide
     description: Covers using the SASL Inspection filter.
     tags:
       - filter
+      - security
     rank: '023'
     path: html/sasl-inspection-guide
   - title: Authorization Guide
     description: Covers using the Authorization filter.
     tags:
       - filter
+      - security
     rank: '024'
     path: html/authorization-guide
   - title: Developer Quick Start

_layouts/released-documentation.html

@@ -53,6 +53,12 @@ <h1 id="page-title" class="fs-3">{{ version }} Documentation</h1>
       <button class="btn btn-sm btn-outline-secondary" data-filter="developer">
         <i class="bi bi-code-slash"></i> Developer
       </button>
+      <button class="btn btn-sm btn-outline-secondary" data-filter="security">
+        <i class="bi bi-shield-lock"></i> Security
+      </button>
+      <button class="btn btn-sm btn-outline-secondary" data-filter="governance">
+        <i class="bi bi-check-square-fill"></i> Governance
+      </button>
     </div>
     <div class="row row-cols-1 row-cols-md-2 g-4">
 {%- for doc in docs_for_release -%}
@@ -73,7 +79,7 @@ <h2 class="card-title fs-4 mb-0 flex-grow-1">
               <a href='{{ linkTemplate | replace: "$(VERSION)", version}}'>{{ doc.title }}</a>
             </h2>
 {%- assign primary_tag = doc.tags[0] -%}
-            <i class="bi bi-{% if primary_tag == 'proxy' %}cpu{% elsif primary_tag == 'filter' %}puzzle{% elsif primary_tag == 'kubernetes' %}boxes{% elsif primary_tag == 'developer' %}code-slash{% elsif primary_tag == 'record-encryption' or primary_tag == 'encryption-at-rest' %}shield-lock{% else %}file-text{% endif %} text-secondary ms-2" aria-hidden="true"></i>
+            <i class="bi bi-{% if primary_tag == 'proxy' %}cpu{% elsif primary_tag == 'filter' %}puzzle{% elsif primary_tag == 'kubernetes' %}boxes{% elsif primary_tag == 'developer' %}code-slash{% elsif primary_tag == 'security' %}shield-lock{% elsif primary_tag == 'governance' %}check-square-fill{% else %}file-text{% endif %} text-secondary ms-2" aria-hidden="true"></i>
           </div>
           <div class="card-body mx-3 my-2">
 {{ doc.description }}

_sass/kroxylicious.scss

@@ -418,6 +418,14 @@ b.conum * {
     border-bottom-color: rgba($code-color, 0.3);
   }
 
+  &.doctag-security .card-header {
+    border-bottom-color: rgba($kroxy-light-green, 0.3);
+  }
+
+  &.doctag-governance .card-header {
+    border-bottom-color: rgba($kroxy-mid-green, 0.3);
+  }
+
   .badge {
     font-size: 0.7rem;
     padding: 0.25rem 0.5rem;