* Disabled pprof endpoints on Linkerd control plane components by default * Fixed an issue where mirror service endpoints of headless services were always ready regardless of gateway liveness * Added server side validation for ServerAuthorization resources * Fixed an "origin not allowed" issue when using the latest Grafana with the Linkerd Viz extension