Hello,   QQ: between point #2 and #3 after modification in ldap group access if the user logged out and login again, at that point does the user group reflects correctly??

there is a good post to refer - https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/using-general-htl-components-in-an-aem-spa-react/td-p/376107

you can put comma separated path (make sure, its absolute path) there as it process as string array.

your recommendation derive from your filtering criteria, so read through https://experienceleague.adobe.com/docs/target/using/recommendations/introduction-to-recommendations.html?lang=en for better understanding.

refer - https://experienceleague.adobe.com/docs/experience-manager-desktop-app/using/troubleshoot.html?lang=en to troubleshoot.

hello, refer this - https://experienceleague.adobe.com/docs/experience-manager-65/commerce/storefront/developing/customize-cif-components.html?lang=en hope it helps!!

Isn't it working as expected as after translation (it respect the rollout config during translation) the FR page should refer to FR XF only after EN XF translated (translated and rolled out to FR locale)??

just to cross check, did you associate conf /conf/myapp to your site (as cloud configuration), where you are creating pages using marketo forms?? 

that's write. my bad sometime it becomes so obvious you forget the immutable part in aem as cloud service!!

i don't think there is anything apart from trying through curl. refer below if it works for you. https://sourcedcode.com/blog/aem/tool-generate-curl-command-to-update-osgi-configurations