- Add LDAP foundation in core and new UI permission for managing segment overrides
- Allow org admins to enforce 2FA and introduce trial management in the sales dashboard
- Fix audit‑log threading, environment metadata N+1, payment error handling, subscription metadata display, and move org tests