Function tool tags, SSO and SCIM feature flags, and Remote MCP authentication UI

This release ingests tags declared on Gram Function tools and exposes them through the management API, adds SSO and SCIM feature flags backed by WorkOS event sync, and ships an authentication UI for Remote MCP-backed servers.

Features

• Tags on Gram Function tools #3031  - Ingests tags declared on Gram Function tools, both the top-level tags field on the manifest and tags?: string[] on the TypeScript framework ToolDefinition, and exposes them through the management API. The playground tool editor now opens for function tools the same way it does for HTTP tools. (Author: @bflad )
• SSO and SCIM feature flags with WorkOS event sync #3061  - Adds product feature toggles for SSO and SCIM to admin settings. The Identity page shows connection status and gates configure buttons on these flags, and the Team page invite button is disabled when SSO is active. WorkOS event processing now handles all SSO connection and SCIM directory sync lifecycle events. (Author: @adaam2 )
• Authentication UI for Remote MCP-backed servers #3008  - Adds a remote-based MCP server authentication UI for configuring credentials against Remote MCP-backed servers. (Author: @bflad )
• Abbreviated metric card numbers #3045  - Metric cards now display abbreviated numbers such as 1.5K and 2.3M instead of raw comma-separated values. (Author: @alx-xo )

Bug fixes

• Stable assistant runtime image tags #3056  - Tags the assistant runtime image with a content hash so deploys that do not change the runtime image sources reuse the existing Fly machines instead of recycling them on every commit. (Author: @danielkov )
• Triggers page handles fired and cancelled wake triggers #3016  - Fixes the triggers page failing to load whenever a wake trigger has fired or been cancelled. The status enum now includes active, paused, fired, and cancelled, and the triggers page renders distinct badges for fired and cancelled triggers instead of mislabelling them as Paused or surfacing a generic response validation error. (Author: @danielkov )