v0.5.48

What's Changed

• Make URL scheme configurable via PREFERRED_URL_SCHEME by @glenn-sorrentino in #1195
• Make admin toggles explicit to prevent double‑click race conditions by @glenn-sorrentino in #1196
• Add admin user/alias deletion with CSRF protection and safeguards by @glenn-sorrentino in #1198
• Add login field length limits to prevent scrypt DoS by @glenn-sorrentino in #1199
• Align form validators with model length constants by @glenn-sorrentino in #1200

Full Changelog: v0.5.47...v0.5.48