v0.1.0-alpha.252

What's Changed

• fix(api): WP1 — close anonymous SQL injection via unvalidated filter/sort field names (security) by @jonesrussell in #1873
• fix(api): WP2 — clamp discovery status so anonymous callers cannot leak unpublished identities (security) by @jonesrussell in #1874
• fix(api): WP3 — SchemaController fails closed when the access prototype cannot be built (security) by @jonesrussell in #1875
• fix(api): WP4 — SSR markdown and translation responses now apply per-account field access (security) by @jonesrussell in #1876

Full Changelog: v0.1.0-alpha.251...v0.1.0-alpha.252