Stable v2.10.16

• fix(updates): the superseded PHP file stays removed instead of returning on every panel start
• fix(install): a leftover database role no longer breaks a fresh install
• feat(php): an end-of-life version stays selectable, but now says so
• fix(updates): no automatic update shifts the PHP series, not even through a module
• feat(php): every PHP version states until when it receives security updates
• fix(updates): an automatic update no longer changes the default PHP version
• fix(updates): an rspamd major version change no longer arrives unattended
• fix(php): a pre-release is refused even on a direct request
• fix(mail): the spam thresholds live in one place, and moving one slider changes only that value
• fix(updates): the advisor now reports only what truly has no update path
• fix(php): a PHP pre-release is no longer offered for installation
• fix(updates): the superseded PHP file is removed instead of sitting next to its replacement
• feat(updates): what the customer cannot configure is patched automatically
• fix(updates): the patterns match third-party sources by host, not by the origin field