A documentation-backed, testable runbook for Authentik 2026 Security Response, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.