chore(main): release 2.46.0

[github-actions]

🤖 I have created a release beep boop

2.46.0 (2026-08-13)

Features

• cl2k: add a connection test for the AI provider (#487) (c07501e)
• cl2k: key logos out of busy art with the AI erase route (#481) (982bec0)
• gdrive-presets: add new preset 'Chodeus' to gdrive_presets.json (ec01576)
• logging: one designed redaction layer for all log output (#521) (25c2153)

Bug Fixes

• api: cap every JSON body read app-wide; renovate python gate tells the truth (#518) (a36fb2a)
• api: keep exception text out of response bodies; break the logger import cycle (#511) (0244bfa)
• api: poster preview authorizes the resolved path (closes code-scanning 297) (#520) (bf965e9)
• api: poster preview authorizes the resolved path (CodeQL 297) (bf965e9)
• backend: correctness + perf batch (STATIC_DIR, LIKE escaping, fail-open guards, hot-path caching) (#506) (7881bff)
• ci: correct branch-image workflow across the board (#504) (4155bc5)
• ci: develop-invariant guard — pure-insertion Dockerfile check, not byte-prefix (#505) (b3a2b59)
• cl2k: defer artwork uploads like posters, and report deferred failures (#491) (abb2fc3)
• cl2k: extract mixed white+coloured titles in subject mode (#477) (bc8b809)
• cl2k: stop concurrent Drive uploads creating duplicate files (#490) (cc2b236)
• cl2k: withhold Detect text unless the sidecar can serve it (#484) (26edbf8)
• frontend: dead Tailwind classes + used-vs-emitted CI guard, dev-route gating, dead code sweep (#507) (0a15020)
• frontend: follow-up micro-batch — abortable browsePosters, deferred revokes, response docs (#515) (ed351d9)
• frontend: follow-up micro-batch — abortable browsePosters, safe downloads, honest response docs (ed351d9)
• gdrive-presets: add the missing comma before the Chodeus artwork drive (d0ff8d4)
• ui: login password-toggle overlap (root cause) + mobile compatibility pass (#517) (6d7783f)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v2.46.0

🌻