update changelog

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>

CHANGELOG.md

@@ -9,6 +9,8 @@
 - Redo OpenID Connect configuration [#2020](https://github.com/juanfont/headscale/pull/2020)
   - `strip_email_domain` has been removed, domain is _always_ part of the username for OIDC.
   - Users are now identified by `sub` claim in the ID token instead of username, allowing the username, name and email to be updated.
+    - By default, users are automatically migrated based on their username when logged in.
+      - This migration can be disabled, and should be on new installations or fully migrated installations [#2170](https://github.com/juanfont/headscale/pull/2170)
   - User has been extended to store username, display name, profile picture url and email.
     - These fields are forwarded to the client, and shows up nicely in the user switcher.
     - These fields can be made available via the API/CLI for non-OIDC users in the future.
@@ -20,7 +22,6 @@
 - Improved compatibilty of built-in DERP server with clients connecting over WebSocket.
 - Allow nodes to use SSH agent forwarding [#2145](https://github.com/juanfont/headscale/pull/2145)
 
-
 ## 0.23.0 (2024-09-18)
 
 This release was intended to be mainly a code reorganisation and refactoring, significantly improving the maintainability of the codebase. This should allow us to improve further and make it easier for the maintainers to keep on top of the project.