2.2.1

Security

• ha_statistics read ops (list_ids, period, metadata) now honor the token owner's per-entity read policy, closing a gap left by 2.2.0 — a restricted non-admin token could read long-term statistics for entities its policy hides. External (non-entity) statistic ids are unaffected.
• ha_trace is now admin-only (all ops), matching HA's own @require_admin trace commands. Traces embed entity values and automation logic.