fix changelog

Author: Benjosh95

CHANGELOG.md

@@ -1,4 +1,10 @@
 ## Release (2025-xx-xx)
+- `kms`: [v0.3.0](services/kms/CHANGELOG.md#v030)
+    - **Breaking Change:** Updated `create_key()` and `create_wrapping_key()` method signatures to require new `access_scope` parameter
+    - **Breaking Change:** Added new required `access_scope` field to `Key` and `WrappingKey` models
+    - **Feature:** Add new `AccessScope` enum with values `PUBLIC` and `SNA` for managing key access permissions
+    - **Feature:** Add new `Protection` enum with value `SOFTWARE` as a replacement for the deprecated `backend` field
+    - **Deprecation:** The `backend` field is now deprecated in all relevant models. Use the new `protection` field instead
 - `observability`: [v0.9.0](services/observability/CHANGELOG.md#v090)
     - **Feature:** Add new `GoogleChat` webhook
 
@@ -40,12 +46,6 @@
 - `intake`: [v0.1.0](services/intake/CHANGELOG.md#v010)
   - **New**: STACKIT Intake module can be used to manage the STACKIT Intake. Manage your `IntakeRunners`, `Intakes` and `IntakeUsers`
 - `kms`: 
-  - [v0.3.0](services/kms/CHANGELOG.md#v030)
-    - **Breaking Change:** Updated `create_key()` and `create_wrapping_key()` method signatures to require new `access_scope` parameter
-    - **Breaking Change:** Added new required `access_scope` field to `Key` and `WrappingKey` models
-    - **Feature:** Add new `AccessScope` enum with values `PUBLIC` and `SNA` for managing key access permissions
-    - **Feature:** Add new `Protection` enum with value `SOFTWARE` as a replacement for the deprecated `backend` field
-    - **Deprecation:** The `backend` field is now deprecated in all relevant models. Use the new `protection` field instead
   - [v0.2.0](services/kms/CHANGELOG.md#v020)
     - **Breaking Change:** Change return type from `Key` to `Version` for `import_key()` and `rotate_key()` methods
     - **Internal:** Add HTTP 409 (Conflict) error handling to API methods