2.6.2 (2026-03-16) Bug Fixes security: invalidate tokens on password change, enforce session timeout, fix role update (85a60a2) security: token invalidation on password change, session timeout enforcement (0a3a537)
