Sftpgo

### Bug fixes

- WebDAV: return the correct ETag after an upload, or no ETag when it is unavailable.
- An instance that starts with an empty admins table kept serving the setup page until restart; instances backed by a shared SQL provider now re-check the database.
- OIDC: bound the authorization request to the user agent.

### Security fixes

- Share links were not revoked when the owning account was disabled or expired. [GHSA-5jhj-cjcp-jr8r](https://github.com/drakkan/sftpgo/security/advisories/GHSA-5jhj-cjcp-jr8r).
- Unbounded memory allocation when parsing SCP protocol records. [GHSA-j4w8-6gjf-fqvg](https://github.com/drakkan/sftpgo/security/advisories/GHSA-j4w8-6gjf-fqvg).
- WebClient: Stored cross-site scripting through directory names. Reported by ERNW. [GHSA-f9qc-3v4f-32w3](https://github.com/drakkan/sftpgo/security/advisories/GHSA-f9qc-3v4f-32w3).
- File pattern filters were not evaluated on the source of a copy. [GHSA-wwv9-g5x4-966q](https://github.com/drakkan/sftpgo/security/advisories/GHSA-wwv9-g5x4-966q).

### Hardening

- Downloading a share restricted to a single directory as a ZIP archive could extend the share to the owner's entire file system; this