- Added caching layer for secret DAL to improve performance
- Implemented KMS data signing and verification and fixed KMS key migration
- Improved SSO display name fallback and OIDC auth failure messaging; updated Go SDK RetrieveSecretOptions docs with version parameter