chiappa 947ab89e04 fix: bind admin tokens to issuing user; reject after demote/disable (SEC_REVIEW F16) 5 napja
..
AuthEndpointsTest.php 400674340e fix: harden local-admin lookup against is_local-flip tamper (SEC_REVIEW F12) 5 napja
AuthMatrixTest.php 8cf73d2833 feat(M03): api auth foundations — tokens, RBAC, BFF impersonation 1 hete
DisabledUserTest.php f2dd3fddee fix: gate impersonation on user active-status, add actor_via audit signal (SEC_REVIEW F11) 5 napja
SchemaSecretsAtRestTest.php 63d5a8d4e9 feat(M14): security hardening 1 hete
ServiceTokenBootstrapTest.php 40be6c1875 fix: auto-revoke previous service tokens on rotation (SEC_REVIEW F13) 5 napja
TokenIssuerBindingTest.php 947ab89e04 fix: bind admin tokens to issuing user; reject after demote/disable (SEC_REVIEW F16) 5 napja