Synaplan Native Media Fix v4.2.1

Generated images and videos now load in the native app. Media URLs use a short-lived, read-only token instead of the session credential, so a leaked URL cannot be replayed against the rest of the API.

What's Changed

• chore(deps): update ollama/ollama:latest docker digest to 9d30908 by @renovate in #1443
• chore(deps): update backend dependencies by @renovate in #1485
• chore(deps): update qa & dev tools by @renovate in #1484
• chore(deps): update frontend dependencies by @renovate in #1472
• chore(deps): update frontend core by @renovate in #1457
• chore(deps): update php framework by @renovate in #1445
• Update Saved Task Workflows to Phase M and enhance documentation by @orgaralf in #1503
• Refactor media handling in Message components by @orgaralf in #1507
• fix(frontend): keep generated media loadable after the access token rotates by @cristiangrxs in #1508
• feat(media): authenticate native media with a purpose-scoped read-only token by @cristiangrxs in #1509

Full Changelog: v4.2.0...v4.2.1