Release 2.12.0

✨ Features

• health: add application-aware service health probes (59ee217)
• process: expose NzbDAV sponsorship metadata (0f131d0)
• startup: add readiness-aware service lifecycle (93ac964)

🐛 Bug Fixes

• mediastorm: classify restored first-login credentials (83cef39)
• nzbdav: avoid walking runtime data during source discovery (54cb293)
• security: eliminate remaining CodeQL path and socket flows (156d789)
• security: resolve CodeQL path, credential, and socket findings (3ada0d1)
• security: restrict port probes to explicit loopback addresses (596d569)

📖 Documentation

• legal: record dmbdb GPL licensing (22fed97)

🛠️ Build System

• deps: refresh Python and Docker workflow dependencies (f5657b9)
• deps: refresh Python and Docker workflow dependencies (496f477)