membes 1.0.0-alpha5

Fifth alpha: correctness and security fixes ahead of beta, a cleaner internal structure, and less code.

Fixes

• A Membes response flagged "error": true is now treated as a failure even with HTTP 200, so a rejected profile update is reported to the member.
• When Membes returns an empty list, Feeds now unpublishes the events, news items and job ads that are gone from Membes.
• Changing the Membes connection settings, or their key, clears the cached API token and cached API data (including through config import).
• Images are downloaded only over https from the customer domain, without following redirects.
• The registration form no longer fails to restore from the form cache on PHP 8.3.
• Only https links on the customer domain open in the Membes dialog.
• The membes_base recipe no longer requires Canvas; Canvas setup moved to a membes_canvas_base recipe applied by membes_starter.

Changes

• Member sync applies the changed-profile records it already receives, instead of fetching each profile again, saving API requests.
• State names are fetched one state at a time instead of loading the full states list.
• Job ads are listed newest first using core's date sort; the custom sort plugin is removed.
• New services: MemberLink (account to Membes profile links) and EventRegistration::register() returning a RegistrationOutcome; profiles are read through a Profile value object. Implementation classes are marked @internal.

Known limitation

Membes' changed-profiles endpoint returns at most one page and has no timestamps or paging, so if more than the page limit of profiles change between cron runs, some role changes are only picked up at the member's next login.

Upgrading from earlier alphas is not supported: uninstall and reinstall.