5.0.0-JF12-beta

Jellyfin 12.0 (.NET 10) beta 5.0.0-JF12-beta (plugin version 5.0.0.56).
Install via the beta repository URL (a Jellyfin 12.0 server picks this build automatically by targetAbi):
https://raw.githubusercontent.com/Flowfin/jellyfin-plugin-sso/manifest-beta/manifest.json

Scope note (#743): the JF12/5.0 line is not validated against a live Jellyfin 12.0 server yet - no 12.0 GA server exists to run the E2E checklist against. It is CI-built and unit/conformance-tested only, and it is NOT part of the 4.x (Jellyfin 10.11) release-candidate gate; the 5.0 line clears its own live-validation gate when a Jellyfin 12.0 RC/GA build is available. Use these betas for testing, not production.

What's Changed

• Create the channel branch when the manifest publish finds it missing by @iderex in #1387
• Declare the committed culture set the catalogs are checked against by @iderex in #1388
• Prove the KEK-loss fail-closed path with an executed E2E phase by @iderex in #1390
• Trigger the wiki lint from the wiki, and name the revision it read by @iderex in #1392
• Point the README at the client compatibility matrix by @iderex in #1393
• Make the legacy-secret-migration phase able to run and to write by @iderex in #1394
• Assert the authorize request's shape on the real identity provider by @iderex in #1395
• Rotate the SAML signing key mid-run and prove both sides of it by @iderex in #1396

Full Changelog: 4.3.0-beta.40...5.0.0-JF12-beta.56