2.12.49

What's Changed

• chore(zed): bump Zed to stop per-event websocket log lines by @nessie993 in #3503
• chore(deploy): rotate container logs by @nessie993 in #3501
• fix(settings-sync): log a persistent poll error once, not every 30s by @nessie993 in #3502
• fix(hydra): stop tracked-but-stopped desktops pinning GC; harden orphan reaper by @nessie993 in #3504
• fix(server): fail refused desktop starts on the first auto-wake kick by @nessie993 in #3505
• fix(sandbox): charge each billing window once across replicas by @nessie993 in #3506
• fix(hydra): stop the 10-minute GC deleting paused sessions' data by @nessie993 in #3507
• feat(desktop): pass user browser languages to the desktop browser by @chocobar in #3500
• fix(api): reject out-of-enum spec task type and priority (TST-01-194) by @chocobar in #3510
• fix(api): validate provider endpoint model IDs (TST-01-201) by @chocobar in #3512
• fix(frontend): upgrade mermaid/axios and sanitise mermaid SVG output (TST-01-293) by @chocobar in #3509
• fix(api): validate spec task branch refs against git ref grammar (TST-01-193) by @chocobar in #3511
• fix(frontend): hide task decisions in restricted embeds by @chocobar in #3513
• fix(git): link PAT-browsed GitHub repos, reject under-scoped tokens on entry, show errors above dialogs by @lukemarsden in #3519

Full Changelog: 2.12.48...2.12.49