0.2.9a2+als.a1

Implement admin commands for service principals + API keys (#1363)

* check for array of arrays and convert to ndarray

* add commands to create service-accounts and API keys

Co-authored-by: Copilot <copilot@github.com>

* fix description of downgrade-database

* describe --access-tags constraints

* add CHANGELOG entry

* move API keys table to separate function

* add `admin api-key` subcommand

* fix setting empty role when not admin

* allow specifying custom principal roles, default to "user"

---------

Co-authored-by: Copilot <copilot@github.com>

v0.2.9-a2-als-a1

Adds inheritance tag checking.