Fix docs markup errors

docs/config.json

@@ -2114,7 +2114,7 @@
     },
     {
       "source": "/preview/database-access/",
-      "destination": "/database-access/",
+      "destination": "/database-access/introduction/",
       "permanent": true
     },
     {
@@ -2124,7 +2124,7 @@
     },
     {
       "source": "/kubernetes-ssh/",
-      "destination": "/kubernetes-access/",
+      "destination": "/kubernetes-access/introduction/",
       "permanent": true
     },
     {
@@ -2224,7 +2224,7 @@
     },
     {
       "source": "/kubernetes-access/getting-started/local/",
-      "destination": "/kubernetes-access/",
+      "destination": "/kubernetes-access/introduction/",
       "permanent": true
     },
     {
@@ -2307,11 +2307,6 @@
       "destination": "/access-controls/access-request-plugins/ssh-approval-jira/",
       "permanent": true
     },
-    {
-      "source": "/enterprise/workflow/ssh-approval-jira-cloud/",
-      "destination": "/access-controls/access-request-plugins/ssh-approval-jira/",
-      "permanent": true
-    },
     {
       "source": "/enterprise/workflow/ssh-approval-slack/",
       "destination": "/access-controls/access-request-plugins/ssh-approval-slack/",
@@ -3017,11 +3012,6 @@
       "destination": "/management/dynamic-resources/teleport-operator/",
       "permanent": true
     },
-    {
-      "source": "/management/guides/terraform-provider/",
-      "destination": "/management/dynamic-resources/terraform-provider/",
-      "permanent": true
-    },
     {
       "source": "/get-started/",
       "destination": "/",
@@ -3062,11 +3052,6 @@
       "destination": "/agents/join-services-to-your-cluster/kubernetes/",
       "permanent": true
     },
-    {
-      "source": "/management/guides/teleport-operator/",
-      "destination": "/management/dynamic-resources/teleport-operator/",
-      "permanent": true
-    },
     {
       "source": "/management/guides/terraform-provider/",
       "destination": "/management/dynamic-resources/terraform-provider/",
@@ -3076,11 +3061,6 @@
       "source": "/connect-your-client/putty/",
       "destination": "/connect-your-client/putty-winscp/",
       "permanent": true
-    },
-    {
-      "source": "/server-access/guides/openssh/",
-      "destination": "/server-access/guides/openssh/openssh/",
-      "permanent": true
     }
   ]
 }

docs/pages/access-controls/login-rules/guide.mdx

@@ -21,7 +21,7 @@ cluster on version `11.3.1` or greater.
 
 Login Rules only operate on SSO logins, so make sure you have
 configured an OIDC, SAML, or GitHub connector before you begin.
-Check the [Single Sign-On](../sso/) docs to learn how to set this up.
+Check the [Single Sign-On](../sso.mdx) docs to learn how to set this up.
 
 ## Step 1/5. Configure RBAC
 

docs/pages/management/admin/trustedclusters.mdx

@@ -98,7 +98,7 @@ configured with a single sign-on identity provider that authenticates her identi
 Based on the information from the identity provider, the root cluster assigns Alice the `full-access` role
 and issues her a certificate. The mapping of single sign-on properties to Teleport roles is configured when
 you add an authentication connector to the Teleport cluster. To learn more about configuring single sign-on
-through an external identity provider, see [Configure Single Sign-on](../../access-controls/sso).
+through an external identity provider, see [Configure Single Sign-on](../../access-controls/sso.mdx).
 
 Alice receives the certificate that specifies the roles assigned to her in the root cluster. This metadata
 about her roles is contained in the certificate extensions and is protected by the signature of the root 

docs/pages/management/operations/db-ca-rotation.mdx

@@ -128,7 +128,7 @@ You do not need to reconfigure databases at this point if you are rotating only
 the `db` CA, although there is no harm in doing so.
 
 Consult the appropriate
-[Teleport Database Access Guide](../../database-access/guides) for your
+[Teleport Database Access Guide](../../database-access/guides.mdx) for your
 databases before proceeding to the `update_clients` rotation phase.
 </Admonition>
 
@@ -172,7 +172,7 @@ lose access** to those databases after transitioning to the `standby` phase in
 this final step.
 
 To avoid down time, consult the appropriate
-[Teleport Database Access Guide](../../database-access/guides) and reconfigure
+[Teleport Database Access Guide](../../database-access/guides.mdx) and reconfigure
 your databases before proceeding.
 Otherwise, access may still be restored by reconfiguring your self-hosted
 databases after this step.

docs/pages/reference/terraform-provider.mdx

@@ -1182,7 +1182,7 @@ Allow is a list of TokenRules, nodes using this token must match one allow rule
 | project_path    | string |          | ProjectPath is used to limit access to jobs belonging to an individual project. Example: `mygroup/myproject`                                                                       |
 | ref             | string |          | Ref allows access to be limited to jobs triggered by a specific git ref. Ensure this is used in combination with ref_type.                                                         |
 | ref_type        | string |          | RefType allows access to be limited to jobs triggered by a specific git ref type. Example: `branch` or `tag`                                                                       |
-| sub             | string |          | Sub roughly uniquely identifies the workload. Example: `project_path:mygroup/my-project:ref_type:branch:ref:main` project_path:{group}/{project}:ref_type:{type}:ref:{branch_name} |
+| sub             | string |          | Sub roughly uniquely identifies the workload. Example: `project_path:mygroup/my-project:ref_type:branch:ref:main project_path:{group}/{project}:ref_type:{type}:ref:{branch_name}` |
 
 #### spec.kubernetes