Stable v2.8.52 — Security

• fix(security): validate extension id before deleting its directories
• fix(security): harden agent input validation against injection and SSRF