- Add origin and mapping_id columns to user_roles and user_groups - Create claim_mapping_rules table with match_type and action constraints - Update primary keys to include origin column - Add indexes for fast managed assignment cleanup Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>