7.5.0 (2026-07-27) Features auth: surface permission decisions that came from the configured default (#293) (#294) (125dab4)