Prepare 8.7.0

[julien-nc]

Added

• Add Microsoft Graph support and an occ option to resolve Entra ID group GUIDs to group names @small1 @julien-nc #1379

Changed

• Hide provider secrets by default in occ providers output @julien-nc #1385
• Replace deprecated backend APIs and adjust Psalm coverage for newer Nextcloud methods @CarlSchwan @julien-nc #1372
• Update tests for PHPUnit deprecations and refresh composer dependencies @julien-nc #1382

Fixed

• Avoid validating non-Bearer Authorization header values in the user backend @julien-nc #1386
• Stop logging sensitive data during OIDC processing @julien-nc #1380
• Set the user session after successful bearer token validation so injected user IDs stay available @hangerrits @solracsf #1376
• Improve single logout JWT decode error reporting for too-short GSS secrets @nfebe #1374
• Support dotted claim names when resolving nested OIDC claims @strobelpierre #1375
• Stop using removed OC\Server::getAppManager() accessors and update related logout tests @julien-nc #1371