chore(release): 2.0.0

[tdrabikdev]

Feature-complete 2.0.0 milestone. Bundles the PII encrypt-at-rest epic.

• feat(security): encrypt Contact.email at rest + blind index (G3) #596 — encrypt Contact.email + email_hash blind index
• feat(security): encrypt Contact + Company phone at rest (G3) #598 — encrypt Contact + Company phone at rest

The masked PII is now encrypted at rest; money columns stay plaintext by design (forecasting needs DB aggregation; masking already hides them from free). Since 1.0.0: customer portal, SSO (OIDC + SAML, login + single-logout), F4 role enforcement, G3 ABAC (territory + masking + PII encryption), detail views + exports across the CRM.

Full suite 1141 passed / 1 skipped; PHPStan 0-new; Pint clean; MySQL-verified.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}