- Added ability to map OIDC groups to OIDC roles and expose idToken in auth hooks
- Fixed multiple UI issues and permission bugs while improving relational lookup performance
- Switched TinyMCE to MIT‑licensed version and added automatic admin policy assignment for CLI‑created roles