Update links to https [ci skip]

Bundle update

Cleanup old Rails.version check for db migration path

Fix Gemfile for Rails 7.2, incorrectly testing against 7.1

Release v5.0.3

Add CVE to changelog [ci skip]

Fix race condition vulnerability, by ensuring the `unconfirmed_email` is always saved (#5784)

Bundle update

Configure default permissions as read-only for the workflow

Ignore test/** folder for GH default code scanning

Bundle update, clear dependabot security issues

Add a note to the changelog about an edge case issue some users ran into

Release v5.0.2

Add `sign_in_after_reset_password?` check hook to passwords controller (#5826)

Stop building both branch & PR with pushes