5.9.0 (2026-08-22) Features close device-token holes, fix config-reload races, unify env booleans (431a8af) harden admin auth, gate releases on CI, and shut down cleanly (b70af6e)
