v0.6.0

Breaking:

• Identity realms, one credential. People live in the directory and are linked to IdP subjects on first sign-in. API keys and sessions share one table and one validate call; the gateway asks once and the realm decides the route. v1 credentials issued before this release still validate. (d935810)
• Organization slug removed. The org id is the address and name is the label. (34825e7)
• Staff-only routes. GET /users and GET /members/{member_id}/user are staff-only and off the customer catalog (7308c32). A person's status moved to PATCH /users/{user_id}/status, staff-only; PATCH /users/{user_id} now changes the name only (c13a956).
• Org lifecycle events. organization.created and member.created are written in the same transaction as the create (a1fa5a5). Removing a member revokes their keys, deletes sessions and records member.removed; removed is final, and re-adding the person creates a new member id. Org delete records organization.deleted (4aab010).

Also

• A user route is recorded in the person's own audit log, and in the org's when the service names it (d935810).
• Docs describe the model as realms, one credential, and owners (9a7d93b).
• Compose images pinned to v0.6.0 (f1ba8f1).

Full changelog: v0.5.0...v0.6.0