5.0.0-JF12-beta

Jellyfin 12.0 (.NET 10) beta 5.0.0-JF12-beta (plugin version 5.0.0.72).
Install via the beta repository URL (a Jellyfin 12.0 server picks this build automatically by targetAbi):
https://raw.githubusercontent.com/Flowfin/jellyfin-plugin-sso/manifest-beta/manifest.json

Scope note (#743/#1466): the JF12/5.0 line has had no manual Release-QA pass against a live Jellyfin 12.0 server - no 12.0 GA server exists to run the E2E checklist against, and this line is NOT part of the 4.x (Jellyfin 10.11) release-candidate gate. What it does carry since #1466 is the automated seven-stack provider matrix that gates this publish: it boots a live jellyfin/jellyfin:12.0-rc2 server, installs the net10.0 artifact this release ships into it, and drives OIDC and SAML login round-trips against seven identity providers. That is the rc the net10.0 build compiles against and no later 12.0 build. The 5.0 line clears its own live-validation gate when a Jellyfin 12.0 GA build exists and the manual checklist has been run against it. Use these betas for testing, not production.

What's Changed

• Refuse a numeric SubtitleMode at both sites that read one [#1482] by @iderex in #1488
• Publish the mappable permission vocabulary from one producer [#1484] by @iderex in #1489
• Record the trusted-header verdict where the analysis is [#808] by @iderex in #1490
• Report every endpoint of an authorization walk, not the first dead one by @iderex in #1491

Full Changelog: 4.3.0-beta.57...5.0.0-JF12-beta.72