New features

Org-scoped API tokens

avocado connect auth now issues org-scoped API tokens. Commands that interact with Peridio automatically use the token scoped to the active organization:

avocado connect auth login --org my-org

Var image build progress

avocado build now displays a progress indicator during var image creation, providing visibility into what was previously a silent long-running step.

Bug fixes

• Fixed browser login fallback: if the full profile lookup fails, the CLI now falls back to an unscoped profile rather than erroring.
• Fixed cgroup mount isolation: bind mounts now use --make-private to prevent the SDK container from leaking cgroup controllers to the host.
• Fixed avocado connect upload not respecting default_target from config, requiring --target to be passed explicitly.
• Fixed find_active_extensions returning incorrect results when multiple runtimes shared extensions.
• Bumped vulnerable dependencies to resolve cargo audit failures.