2026-07-15 Access Token API
- New optional
anonymizeflag added when creating access tokens (POST /v1/access-tokens, including the app-token and assume-token variants); whentrue, all entity data returned to the token is PII-anonymized and the bearer cannot turn it off — the flag is also returned on token list, create, and delete responses