- Add PostHog event tracking for approval workflows and remove OAuth sources from attribution events
- Implement fallback mechanism and disable password for Unix rotation; add SPIFFE machine authentication and AWS IAM options for agent injector
- Fix UI and RBAC issues: correct commit label typo, improve sub‑org selector and SAML login handling, address leave‑project for minimal RBAC users