- Enabled PKI issuer creation and default issuer updates via "default follows latest issuer".
- Fixed numerous bugs: panic in Okta auth renewal, deadlocks in core, CLI KV command issues, lock contention in quotas, UI snapshot download, and duplicate GCP service account keys.
- Added WAL cleanup for Azure role assignments and de‑duplicated policies before ACL generation.