CrossWatch v0.11.6

This release includes several caching methods, which should result in faster page loads when content is cached.
It also includes additional security hardening and UI tuning.

Plex watcher reworked: routes now handle missing playback users more strict.
CW will try to resolve the real Plex user from the active session before applying username filters.
The (old)fallback behavior is still available (and enabled) for existing routes but for new routes the default is disabled (strict).
After upgrading, be sure to test your routes.

Special thanks to: @WegoW @LightMoon @mmuffins @Danavans for providing issue/feature reports and testing.

✨ Highlights

• Anime ID mapping: CW tracker can now enable Anime mapping for history pairs
• Profile page: Recent Activities widget has been improved and now shows recent syncs, scrobbles and other activity.
• Plex watcher: Playback users are now resolved from active sessions before username filters are applied. (see improvements)

🔧 Fixes & Improvements

• Improved: Plex watcher routes resolve the playback user from active sessions before applying username filters.
• Improved: Shared Plex tokens, for servers you do not own, now resolve the user once at connect and skip session lookups entirely.
• Improved: Plex route option Unresolved user fallback now only applies when the token cannot read sessions at all.
• Improved: Plex watcher skips metadata lookups for playback that no route accepts.
• Improved: Added a Plex route option Unresolved user fallback.
• Improved: Stremio episode history dates no longer drift from later show playback.
• Improved: Stremio watchlist rows now keep TMDB ids when metadata is available, so watchlist covers resolve more reliably.
• Improved: Main and Profile dashboard widgets now reuse cached data on refresh when nothing changed.
• Improved: Watchlist API responses now include version checks so the UI can skip unnecessary rebuilds.
• Improved: Watchlist page now reuses cached data and row metadata for faster refreshes.
• Improved: Watchlist provider branding now uses shared provider metadata, including Nuvio and Stremio.
• Improved: Watchlist empty states and toolbar controls are cleaner.
• Improved: SIMKL watchlist sync no longer moves items already covered by SIMKL history/watching back to plan-to-watch.
• Security: Auth bootstrap and recovery credential updates now re-check setup state before writing credentials.
• Security: Unauthenticated bootstrap and recovery now only allow enabling auth with valid credentials.
• Security: Webhook completion replay handling now avoids duplicate completion.
• Security: Malformed webhook payload logs no longer include raw body snippets.
• Security: Hardened Plex SSO.
• Fixed: Sync pair runs could, in specific cases, not finish because the title index cache stayed alive after slow builds.
• Fixed: Watchlist now clears correctly when the backing state has been removed.
• Updated: Adapters Nuvio to v0.5, Stremio to v0.3.
• Removed: Watchlist local visibility controls.