v0.12.0

Changed

• One identity spelling everywhere. An identity is now written account.role in grantry ls, policy patterns, the audit log, and the ~/.aws/config profile name grantry writes, so the exact same string works for both grantry run <id> and the native aws --profile <id>. Previously grantry showed account/role while the profile name used account.role, which forced you to remember two forms. The dot is the canonical separator; the older account/role slash form is still accepted as input and in policy patterns, so existing policies, scripts, and muscle memory keep working. grantry init now generates dot-form patterns.

Fixed

• grantry populate and login write account.role profile names that match the identity you see in grantry ls, removing the earlier . vs / mismatch.