- Fixed discovery script crash when jq is missing.
- Improved node‑listing performance for tsh/tctl and made S3 bucket fields required for AWS OIDC integration in the UI.
- Removed implicit AccessList membership/ownership; all owners and members must now be explicitly specified (breaking change).