chore(main): release iam-service 0.16.0

[github-actions]

🤖 I have created a release beep boop

0.16.0 (2026-07-02)

Features

• cost-erp: add ERP item CRUD — domain, repository, gRPC handler, migrations (25671e2)
• email: reduce social icon display size from 36px to 30px (8d6131d)
• email: replace pill buttons with hosted PNG social icons in footer (a5e70f2)
• finance: audit emit on product master/param mutations; calc schedule menu (a241f9e)
• finance: param value override with audit trail; lock enforces fill approval; confirm requires locked route (8d50622)
• iam: add CheckPassword method, VerifyPassword gRPC handler, migration 000055 (ce31daf)
• iam: add menu_id column to mst_permission (f26f704)
• iam: backfill permission menu_id from RBAC audit (275 mapped, 4 global) (7c64a0a)
• iam: permission repository persists menu_id, joins menu_title, ListByMenu (792cc77)
• iam: require permission description; thread menu_id through update + list filter (3c65162)
• iam: seed company mappings, employee levels and groups from legacy data (75df047)
• iam: seed company mappings, employee levels and groups from legacy data (fc0624b)
• iam: seed Yarn Master menus and 24 permissions (migration 000057) (f9a9333)

Bug Fixes

• bulk-export: correct download filename and add import-jobs menu seed (b9fe944)
• iam: align route-unlock permission migration with current mst_permission schema (85f8482)
• iam: GetPermissionsByService returns role_count per permission (11f3646)
• iam: GetUserRolesAndPermissions returns true direct grants separately (fe7e28a)
• import: Async Cost Data Import Engine, CPM Extensions & Email Assets (780cb08)
• lint: resolve golangci-lint v2 failures in finance and IAM services (33aa588)
• lint: resolve golangci-lint v2 issues across finance and iam (393ee82)
• notifications: Multi-replica SSE via Redis Pub/Sub & Email Client Compatibility (#120) (ad4c9e4)
• Route Lock Enforcement, Param Override Audit Trail, and IAM Password Verification (d526e9d)

Reverts

• cost-erp: remove ERP item CRUD from backend; add legacy flex fields to product master pipeline (cc4b4bf)

---

This PR was generated with Release Please. See documentation.