Release Engine 0.183.322 with retry-safe network purge and artifact g…

…ate (#49)

* Retry account purge for networks already removing

* fix(build): reject development content in Engine release artifacts

* chore(release): prepare Engine 0.183.322

---------

Co-authored-by: chen21019 <[email protected]>

Hide inactive and removed project members on direct reads (#48)

fix(auth): hide removed project members on direct reads

Co-authored-by: chen21019 <[email protected]>

fix(auth): authorize project-member collections against requested pro…

…ject (#47)

fix(auth): authorize project member collections by requested project

Co-authored-by: chen21019 <[email protected]>

Make shared Default membership reconciliation atomic (#46)

Make shared default membership reconciliation atomic

Co-authored-by: chen21019 <[email protected]>

fix(auth): preserve restricted project membership boundary

Resolve existing OIDC accounts before restricted-mode project access checks, while keeping required-mode allowlist-only. Includes focused regressions, full Maven reactor validation, signed source commit, CodeQL verification, and the security release gate.

Use one shared Default environment in Engine 0.183.317 (#44)

Reconcile accounts into shared Default environment

Co-authored-by: chen21019 <[email protected]>

Preserve local recovery under required OIDC access (#43)

Co-authored-by: chen21019 <[email protected]>

Fix OIDC identity link ownership (#42)

Co-authored-by: chen21019 <[email protected]>

Fix frozen v1 OIDC project member schema (#41)

Co-authored-by: chen21019 <[email protected]>

Fix OIDC account activation before MFA (#40)

Co-authored-by: chen21019 <[email protected]>