Release v4.189.7

Fixed

• Playing a model with several modules in the Stage sandbox no longer answers role-gated queries and commands with 403. Stage now picks a persona for each API request from the authorization of the operation being called, including requirements from its module, feature and the operation itself. It prefers the user menu's persona when that persona qualifies, otherwise the first declared persona that qualifies, and otherwise the persona it chose before. Incoming x-ms-client-principal headers are still removed and forwarded-identity trust stays off, so callers still cannot choose an identity. This applies only in sandbox mode, which the Stage Docker image turns on. (#676) (part of #599)