Untrusted media input

Jellyfin 10.11.10+ Security: Treat Media as Untrusted InputNew!!

Contain untrusted Jellyfin media, preserve evidence, patch to the current stable release, restrict writable paths, validate clients, and recover without returning to a vulnerable version.