Security
- propagate session-destroy and closed-mode revocation-store failures from logout, session initialization, and access-token retrieval, preventing a logout redirect when the session cannot be destroyed; see #571
Bugfixes
- require lua-resty-session 4.2.0-1 for the propagated revocation-store failure behavior.
Other
- update the Docker CI image to Ubuntu Jammy and vendor its test-only Serpent dependency, removing a flaky Ubuntu Focal APT/Git dependency.