Refactor product updates in changelog

Removed duplicate entries and improved clarity in product updates section.

Author: eclairen

changelog.mdx

@@ -12,14 +12,14 @@ For API library updates, see the [Node SDK](https://github.com/onkernel/kernel-n
 <Update label="April 24" tags={["Product", "Docs"]}>
 ## Product updates
 
-- Kernel is now a [Cloudflare Web Bot Auth partner](https://www.kernel.sh/blog/cloudflare) — Kernel browsers can [cryptographically identify themselves](/browsers/bot-detection/web-bot-auth) to Cloudflare-protected sites, so site owners can explicitly allow Kernel traffic instead of blocking it as generic bot traffic.
-- Anti-detection protections are now on by default for all Kernel browsers. [Stealth mode](/browsers/bot-detection/stealth) now specifically adds the managed residential proxy and CAPTCHA solver (both opt-out), and non-stealth browsers fully support [custom proxies](/proxies/custom).
-- Revamped the [managed auth hosted login page](/auth/hosted-ui): all available sign-in options (password fields, SSO providers, MFA, alternate sign-in methods) now render together on a single page, so end users can pick the path they want instead of being funneled through one at a time.
+- Kernel is now a [Cloudflare Web Bot Auth partner](https://www.kernel.sh/blog/cloudflare). Kernel browsers can [cryptographically identify themselves](/browsers/bot-detection/web-bot-auth) to Cloudflare-protected sites, so Kernel traffic isn't blocked.
+- Anti-detection features are now on by default for all Kernel browsers. [Stealth mode](/browsers/bot-detection/stealth) now specifically adds the managed residential proxy and CAPTCHA solver (both opt-out), and non-stealth browsers fully support [custom proxies](/proxies/custom).
+- Revamped the [managed auth hosted login page](/auth/hosted-ui): all available sign-in options (password fields, SSO providers, MFA, alternate sign-in methods) now render together on a single page, so end users can pick the path they want, instead of being funneled through one at a time.
 - [Managed auth connections](/auth/overview) now automatically re-authenticate expired sessions during health checks when credentials are available, reducing the need for manual reauth.
-- Managed auth input fields now display contextual helper text when the site surfaces hints like "Enter the phone ending in ***-**92", reducing user confusion on multi-step logins.
+- Managed auth input fields now display contextual helper text when the site surfaces hints, reducing user confusion on multi-step logins.
 - The "Save credentials after login" option is now automatically disabled when [1Password](/integrations/1password) is selected as the [credential source](/auth/credentials), since those credentials are already managed externally.
 - Kernel now supports WebSocket connections through its API, enabling `process attach` and other long-lived streaming workflows.
-- Exceeding invocation concurrency limits now returns a 429 response immediately, giving clients faster and more actionable feedback.
+- Exceeding invocation concurrency limits now returns a 429 response immediately, for faster and more actionable feedback.
 - Fixed [browser extension](/browsers/extensions) uploads via the [SDK](https://github.com/kernel/kernel-node-sdk) and [CLI](https://github.com/kernel/cli).
 
 ## Documentation updates