5.8.2 (2026-09-27) Bug Fixes auth: enforce SSO-only server-side, not just in the UI (GHSA-vhv8-cw23-59xm) (#1246) (a81772e) subscriptions: enforce foreign-key ownership on subscription save (GHSA-797x-473j-px9p) (ba9973d)
