- Added createdAt/updatedAt to EventType, introduced BillingCacheService with 1‑hour TTL, exposed user plan info and a fallbackRoles param for permission checks.
- Implemented PBAC for team member listings and permission checks, and added a CI job to detect breaking API v2 changes.
- Fixed several issues (team member removal, nullable Watchlist, billing portal, UI border, missing Swagger DTOs) and performed chores like eslint upgrade and bundle size reduction.