v0.10.3

What's Changed

This release introduces configurable instance share policy controls — admins can now set allowed review visibilities and comment policies, enforced across the API and review UI. It also ships a DAST suite that locks down preview-origin session isolation as a permanent security property, plus a fix for loading preview-host raw assets without a canonical-host session.

• feat: add instance share policy controls by @tomasz-tomczyk in #298
• fix: allow preview host raw assets without app session by @tomasz-tomczyk in #297
• test: add DAST suite for preview-origin session isolation by @tomasz-tomczyk in #296

Full Changelog: v0.10.2...v0.10.3