Changelog

• 677a242 feat: PAT expiry alert emails with configurable templates (#1543)
• b1afc54 feat (client-demo): add theme toggle menu (#1545)
• cbf83ad feat(sdk): add sorting + RQL infinite loading to views-new invoices (#1553)
• 2e4b7d2 feat: SDK projects improvements (#1566)
• ab7be2a feat: add RemoveOrganizationMember RPC and remove RemoveOrganizationUser (#1550)
• 08d63db feat: add membership package and AddOrganizationMembers RPC (#1537)
• fd77b87 feat: add regenerated_at timestamp to PAT (#1542)
• 6e470ce feat: add service user support to membership validatePrincipal (#1562)
• 13f2269 feat: billing page revamp (#1518)
• a8a19f3 feat: move SetOrganizationMemberRole to membership package (#1541)
• 6ff1ad5 feat: plans page revamp (#1534)
• d967c88 fix: bump chronicle version to 0.5.4 (#1555)
• f09c377 fix: resolve PAT to user for resource/project ownership and block PAT superuser access (#1551)
• 04ecbe8 fix: use parameterized queries in RQL utility functions (#1547)
• ec2239c refactor: centralize org member additions via membership package (#1548)
• 901863f refactor: extract common helpers in PAT handler and service (#1556)
• cd1a62d refactor: move SearchOrganizationInvoices to FrontierService (#1549)
• 905317d refactor: move project member mutations into membership package (#1557)
• 79267cb refactor: remove unused serviceuser-user relation from SpiceDB schema (#1561)
• 41bfcd7 refactor: rename PAT last_used_at to used_at (#1546)