Release v22.139.0

Added

• Authentication handlers can opt out of running on endpoints that allow anonymous access by overriding AppliesToAnonymousEndpoints to return false. The default stays true, so existing handlers keep establishing an identity on those endpoints. (#3107)

Changed

• Documented that a validator and Handle() share one read-model fold per command execution, whether they take the model as a plain parameter or as DecisionRead<T>, and that a separate /validate request folds the model again by design. See Validators. (#3243)