Changelog
- 2fff358 fix(bootstrap): reconcile predefined roles instead of add-only migrate (#1687)
- 23b216b fix(invitation): remove user relation on invitation delete (#1678)
- b96f141 fix(role): reject deletion of a role still in use by policies (#1683)
- d1acb6b refactor(api): pass real errors in CodeInternal instead of generic sentinel (#1689)