Next-20250430-rc3

This is a bugfix and feature pre-release in preparation for next actual release:

• Fix routing of migcert reset password requests (PR #204)
• Begin moving scripts like edpickle to new bin dir for clarity (PR #197)
• Add account renewal button for local accounts on Account page (PR #196)
• Fix migrid init sftpsubsys status (PR #221)
• Switch to is_*() methods across Thread and Thread.Event to address errors in issue #224
• Address security issues in CamanJS dependencies used if image previews are enabled (PR #226)
• Adjust service auth policy to avoid giving away information about user non-/existence (PR #209)
• Fix account page errors for legacy account entries without complete peers data (PR #227)
• Fix a leftover string expansion issue on Accounts page in python2 deployments (PR #230)
• Proper session clean up during logout including project + 2FA with extoidc auth (Issue #222 / PR #223)
• Fix GDP projects with space in name not accessible through SFTP (subsys) (Issue #234 / PR #233)
• Command format adjustment for better readability as suggested in issue #235

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Note: the Stable-YYYYMMDD release series specifically refers to the master branch, which is strictly in lock-step with the old SourceForge repo and about to be phased out. The matching Main-YYYYMMDD and Next-YYYYMMDD releases refer to the corresponding main and next (previously edge and experimental) branches used in production. Thus, we recommend using Main for any legacy python2 and Next for all python3 deployments.