v5.0.3

What's Changed

• fix(web): always request offline_access for MCP refresh_token grant by @fatmcgav in #1292
• chore(web): Improved security settings by @brendan-kellam in #1303
• fix(shared): validate SOURCEBOT_ENCRYPTION_KEY length by @brendan-kellam in #1305
• fix(web): prevent crash when User-Agent header is missing by @brendan-kellam in #1309
• fix(web): require User.email and reject SSO sign-ins without an email by @brendan-kellam in #1310

Full Changelog: v5.0.2...v5.0.3