- Commands hash with bcrypt, validate role codes, and revoke tokens on reset - Generated app main appends cabana.RuntimeCommands exactly once
- admin:create and admin:reset-password are not registered yet - Generated app main does not append cabana runtime commands