- Normalize auth paths before comparison and credential scanning - Update effective v8 auth-dir fields without requiring a version marker - Preserve active credentials and configuration when recovery fails - Add regression tests for config reloads and v7-to-v8 upgrades