- Add PAM access request/approval flows, GCP service‑account access type, and revamp PAM rotation
- Introduce new secret rotation providers: OpenAI service account, liteLLM API key, and fireworks.ai
- Fix Azure Key Vault URL validation, secret version subquery, Cloudflare worker sync error, dashboard import path issue, and fireworks sync lint error; update PAM and GCP documentation