- Added PBAC permission enhancements, host validation for team event types, and enforced single owner with PBAC
- Introduced UI improvements: confirmation dialog for API key deletion, created‑at field on admin user edit, and email filtering on team memberships endpoint
- Fixed multiple issues including calendar cache sync, workflow permissions, Outlook calendar event via workflow, billing‑plan tree‑shaking, and added CSRF protection for forgot‑password