merge: staging (with #7488 squashed) into feat/scim-provisioning

#7488 landed on staging as a squash, so the branch now carries staging
itself. Same resolutions as the OAuth merge: both forbidden detail codes,
OpenAPI regenerated, chart 1.10.0, journal keeps 0323_oauth_provider then
0324_scim_provisioning.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DGXcwsHzYGp6pUDWRtJKpz

Author: waleedlatif1