v2.65.2

Security

• A scoped API token no longer reads other modules through global search or the dashboard
  (GHSA-g4f2-x2jf-4mwx). A token can be limited to single modules, which matters most for one
  handed to an AI or MCP client. The search and the dashboard only checked their own scope: a
  token allowed search:read got matching notes, contacts and medications back, and one allowed
  dashboard:read got the data of every tile, although neither named those modules. Both now
  leave out every part whose module the token cannot read, the same way they already left out a
  module a member has no access to - search:read opens the search, and the modules behind it
  need their own scopes. Tokens without scopes and browser sessions see no change; a token set up
  with only search or dashboard returns empty results until its modules are added.