Refreshed sign-in UI at the macOS login screen and UAC prompts.
Added Login with miniOrange first-factor authentication that validates macOS login credentials directly against the miniOrange IDP or AD. Auto-provision local Mac accounts on first successful login, with optional admin-group membership.