…833)

- Add workflow-level permissions: {} to remove default GITHUB_TOKEN permissions
- Remove contents: read from version job (only runs scripts)
- Remove actions: write from pack job (not needed for upload-artifact)
- Add permission-actions: write to GitHub App token for workflow dispatch

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.NET 9 SDK no longer implicitly restores packages when running
dotnet ef, causing the idempotent migration generation to fail.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

…840)

* Return 400 instead of 500 when Origin is missing from FIDO2 requests

Validate Origin in GetFido2Instance so a null value throws an
ApiException(400) instead of letting the Fido2 library blow up with
an unhandled ArgumentNullException.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* new line

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* [deps]: Update bunit to v2

* Updated BUnit classes

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…fixed bug for missing where clause (#856)

* Added additional validation and tests around Joining the organization with invite.

* dotnet format

* format

* remove last empty line

* simplified the fix.

* Added back placeholder for name

* adding last comma