v0.35.9

• Return 401 from /api/auth/v1/logout if not logged in, don't redirect JSON requests and improve OpenAPI docs.
• Refinery fork: add dry-run and remove un-grouped mode.
• Update dependencies. Addresses security advisories.

Full Changelog: v0.35.8...v0.35.9