Organizations, SSO, and incoming secrets in v0.25

v0.25 expands what's possible with custom domains. Organizations let multiple users manage secrets together under role-based permissions, with branded invitations. SSO can be configured site-wide or scoped to a custom domain. Custom domains can now receive Incoming Secrets and use their own email sender, with per-record DKIM verification.

GitHub release notes