v0.1.0-alpha.272

What's Changed

• fix(#2082): enforce application protected-read classifications by @jonesrussell in #2083
• refactor(#2091): make domain defaults opt-in by @jonesrussell in #2092
• refactor: break optional domain dependency edges (#2091) by @jonesrussell in #2095
• Scope optional-domain surfaces to installed packages (#2091) by @jonesrussell in #2096
• Verify minimal and full optional-domain installs (#2091) by @jonesrussell in #2097
• #2091: Strengthen optional-domain install verification by @jonesrussell in #2098
• feat(#2086): add capability-scoped staff directory reads by @jonesrussell in #2087
• fix(#2084): stabilize browser media downloads by @jonesrussell in #2085
• fix(#2088): complete admin content bundle authoring by @jonesrussell in #2099
• fix(#2089): preserve menu object targets by @jonesrussell in #2090
• fix(#2064): compose media field reads with entity access by @jonesrussell in #2100
• fix(#2101): let administrators access ops routes by @jonesrussell in #2102
• fix: preserve admin access to created notes (#2101) by @jonesrussell in #2103
• Fix vocabulary admin actions and safe deletion (#2101) by @jonesrussell in #2104
• fix(#2101): restore live authenticated note creation by @jonesrussell in #2106
• fix(#2101): restore vocabulary browser saves and refusal feedback by @jonesrussell in #2107
• fix(#2108): apply node list query state by @jonesrussell in #2109
• fix(#2108): improve node authoring forms by @jonesrussell in #2110
• fix(admin): hide migrated source status (#2108) by @jonesrussell in #2111
• fix(admin): stamp node authoring timestamps (#2108) by @jonesrussell in #2112
• fix(#2108): hide migrated status in custom admin hosts by @jonesrussell in #2114
• feat(#2115): add per-site API exposure policy by @jonesrussell in #2116
• feat(#2117): add SSR entity page composition by @jonesrussell in #2118

Full Changelog: v0.1.0-alpha.271...v0.1.0-alpha.272