v2.3.11

Security

• Picked up the cryptography 50.0.0 security fix (CVE-2026-69247,
  high). The flaw is in that library's PKCS#7 EnvelopedData decryption, which PrintGuard
  never calls: the package is here only as a dependency of the JWT and token libraries
  behind sign-in and push notifications, so no PrintGuard install was exposed. Nothing else
  changed in this release. Pull the new image if you want a clean dependency scan.