settings

Branding, users and roles (R5.8.6).

Not in the Phase 0 prototype — see docs/PRD.md §10.