- Add CLAUDE.md development guide (project structure, testing, gotchas) - Update README with 10 new OIDC presets (22 total) - Add CHANGELOG v2.2.0 entry - Update SECURITY.md supported versions for v2.x - Add audit_log table and admin operation logging - Add GET /admin/audit-log endpoint - Validate CORS wildcard at startup, limit body size to 16kb - Validate email format on removal, handle format on proxy auth