7.4.1 (2026-07-24) Bug Fixes auth: prevent ownerless resources from API-first users, with opt-in bearer provisioning (#262) (#268) (20262bb), closes #267 #267