v0.52.3

Fixed

• Allow filters, sorts, and exports on readable @field_access fields when
  tenant-dependent custom policies can be proved safe for every tenant in the
  enforced query scope. Account for principal-only Boolean conditions that
  safely exclude a policy for the caller, including platform administrators.
  Preserve denials for forbidden tenants, record-dependent field policies,
  and evaluation errors.

What's Changed

• ci: pin the validated v0.52.2 server by @rrrodzilla in #255
• fix(authz): prove query fields within enforced tenant scopes by @rrrodzilla in #257

Full Changelog: v0.52.2...v0.52.3