Stable v2.6.49

• feat(mail): catch-all — split-routing fix + spam-warning + perm gating
• docs(plan): autoresponder is covered by Roundcube webmail (managesieve), not a gap