- Remove tier from create tenant form (always defaults to STARTER,
controlled via license minting)
- Admin email is now the primary identity field
- Username auto-derived from email local part, optionally overridable
- Set primaryEmail on Logto user at creation (prevents invalid accounts)
- Async tenant delete: PG/ClickHouse cleanup runs after commit instead
of blocking the HTTP response
- Remove legacy /server/* OIDC redirect URIs from bootstrap
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>