Allow one server-audited onboarding polish request without credits and make the certificate gate temporarily reversible while preserving application authentication.
Provide the production foundation for Apple identity, immutable credits, referrals, integrity checks, managed providers, and hardened Docker deployment.