- Added support for issuing intermediate CAs via certificate profiles, Cassandra dynamic secret handling, and name‑based RBAC permission conditions for MCP endpoints; improved host validation errors.
- Updated documentation with enable‑duration example and fixed frontend UI to display "no change" commit comparisons and renamed duplicate MCP endpoint names before adding unique constraints.