- Added a Dynamic Client Registration (DCR) scope to the Tenant Access Control List.
- Allows admins to restrict access to the /oidc/register endpoint using network and client signals, mitigating unauthorized or automated client creation.
- Configuration is exposed through the Management API and documented in the Tenant ACL docs.