Centralize safe authentication redirects, restore user info from existing tokens, and retain sessions on permission errors. Add redirect tests and business flow documentation, show bulk action icons, and update app manifest and pnpm configuration.