Stable v2.10.64 — Security

Bugfixes & Security

• Check site ownership before any agent call, not just before DB takeover
• Persist mail migration job ownership across restarts
• Replace dead ownership check on site thumbnail endpoint
• Verify mailbox migration job ownership before returning status
• Close third unchecked-:uid call site, PUT grants
• Verify MariaDB username belongs to the owned database before drop/reset
• Close fail-open customer_id lookup on wp-import routes