website/docs: Apple Business Manager Integration. (#13319)

website/docs: Flesh out Apple Business Manager integration.

- Fix missing required attribute.
- Adjust visible headers in table of contents.
- Fix Docusaurus warning for nested paragraphs.

website/docs/add-secure-apps/applications/manage_apps.mdx

@@ -37,12 +37,12 @@ When multiple policies/groups/users are attached, you can configure the _Policy
 
 ## Application Entitlements
 
-<p className="badge-group">
+<div className="badge-group">
 
 :ak-version[2024.12]
 :ak-preview
 
-</p>
+</div>
 
 Application entitlements can be used through authentik to manage authorization within an application (what areas of the app users or groups can access). Entitlements are scoped to a single application and can be bound to multiple users and/or groups (binding policies is not currently supported), giving them access to the entitlement. An application can either check for the name of the entitlement (via the `entitlements` scope), or via attributes stored in entitlements.
 

website/docs/add-secure-apps/providers/ssf/create-ssf-provider.md

@@ -3,6 +3,9 @@ title: Configure an SSF provider
 authentik_version: "2025.2.0"
 authentik_enterprise: true
 authentik_preview: true
+tags:
+    - backchannel
+    - provider
 ---
 
 The workflow to implement an SSF provider as a [backchannel provider](../../applications/manage_apps#backchannel-providers) for an application/provider pair is as follows:
@@ -41,7 +44,7 @@ The workflow to implement an SSF provider as a [backchannel provider](../../appl
 
 3. Define the settings for the application:
 
-    - **Name**: define a descriptive name ofr the application.
+    - **Name**: define a descriptive name of the application.
     - **Slug**: optionally define the internal application name used in URLs.
     - **Group**: optionally select a group that you want to have access to this application.
     - **Provider**: select the OIDC provider that you created.