Workspace Controls & Admin Overhaul

Client management tools, a full admin UI refresh, tenant email branding, and platform security hardening.

**What's New**

- Workspace onboarding tour. New tenant owners see an interactive spotlight walkthrough of all workspace settings tabs. Replay at any time from workspace settings.
- Contract editor. Customize the Music Distribution Agreement with your legal name, country, address, and commercial terms. Your contract language applies sitewide to every client signup.
- Client termination controls. Lock individual clients permanently from user-details. Locked accounts display a clear status banner and are preserved correctly in data exports.
- Asset export. Download DDEX-compatible ZIP bundles — cover art, audio files, and metadata XLSX — directly from any release detail page. Export a single release or pull the full catalog.
- Catalog card grid. Admin Catalog page now offers a Spotify-style card grid alongside the sortable list table. Search and filters are fully responsive on mobile.
- Clients page rebuild. New CRM-style table with trust score, lock status badge, member count, sortable columns, and paginated search. Replaces the previous basic list.
- Full admin light/dark mode. All admin pages now have complete light and dark overrides — no more invisible text, broken contrast, or hardcoded dark surfaces in light mode.
- ACR match detail panel. Every track on a release now shows a green/yellow/red confidence pill for ACR Cloud match status, with DSP-level match breakdowns on the release detail page.
- Tenant email branding. All platform emails — welcome, OTP, 2FA, password reset, release status, royalty splits, team invites — now inherit your tenant brand and display name on Pro, Scale, and Enterprise plans.
- Cover art auto-save. Uploading cover art now persists the draft immediately without requiring a full release record to be created first. Upload failures surface as a visible warning rather than being swallowed.
- Impersonation safety controls. Admin impersonation sessions now time out automatically after 30 minutes. A persistent red banner is shown throughout the session as a clear indicator.
- Security hardening. Multiple improvements across admin and API surfaces including request validation, access controls, and XML processing protections.

**How It Benefits You**

- Launch tenants faster. The onboarding tour, contract editor, and cover art auto-save reduce the time between account creation and first distribution submission.
- Fully white-label every client touchpoint. Custom contract language and full email branding inheritance mean your clients see only your brand — from signup through every notification.
- Manage your client roster with clarity. The rebuilt Clients page and lock controls give you CRM-level visibility into your roster as it scales.
- Keep your catalog and client data private. Security hardening across API and admin surfaces protects release metadata and user records from unauthorized access.