- Added a unified, permission-aware Dashboard bootstrap response that loads dashboard data and pinned resources together, eliminating per-widget request bursts and loading flicker. - Added live Dashboard and sidebar refreshes for resource health, MFA policy, onboarding progress, pinned resources, and inference access. - Added a Dashboard attention indicator: blue for informational setup items and yellow when action is required, including certificate expiry, node capacity or health, pinned-resource health, MFA, updates, logging, and inference limits. - Added a complete Dashboard setup flow for nodes, integrations, users, MFA, inference, and the AI assistant. - Added an MFA warning and direct setup action when a group requires MFA but the current user has not configured it; affected users are notified immediately. - Improved Gateway AI and Lite mode with Dashboard and sidebar pins, search, live inference-access updates, and refined desktop and mobile assistant UI. - Added safe lifecycle management for Gateway-managed certificates: atomic certificate replacement, orphaned certificate cleanup, private-key cleanup, and durable CRL refresh retries. - Fixed Dashboard bootstrap recovery, authorization checks for pinned resources, and installer error reporting during nginx, Docker, and monitoring daemon enrollment.