v0.0.159

Signup email blocklist (#525), and the Cognito trigger custom resource rewritten to preserve pool configuration (#526, #527, #528).

This is the first deploy of the identity integration stack to prod. It attaches both Cognito triggers: PreSignUp (the blocklist) and PreTokenGeneration, which creates user records on first login and restores email_verified for BCSC accounts. The verified-before-hold gate has been live in prod since v0.0.154 and refuses a booking when that flag is false, so prod has been running the gate without its repair.

v0.0.158 failed on the old custom resource, which passed only LambdaConfig to UpdateUserPool and was rejected because the resulting pool state was invalid. The replacement reads the pool, merges the triggers, and echoes every field back; verified on dev by CloudTrail showing 16 request keys where the old resource sent 2.