Hotfix installation

Please make sure you consult the page Hotfix Installation Notes for any additional actions needed to complete the installation.

Main correction(s) provided

• Fixed OAuth2 service provider creation/update accepting a blank authorization server URL
• Fix substringMatchType (subinitial / subany / subfinal) not being honored by user/group search when the user or group directory is a multi-directory (nuxeo.directory.type=multi).
• CMISQL queries combining a JOIN and a CONTAINS() clause no longer fail.

Improvement(s)

• Cache TTL can now be expressed as a Duration string (e.g. 5m, 1h, 30s) instead of a plain number of minutes.
• Return a 409 status code if an exclusive Bulk Action is already running
• The systemChangeToken is now exposed at DocumentModel level
• Review cloud blob providers versioning config at startup and apply a fail-fast strategy when KeyStrategyDocId is used without cloud-storage versioning.
• A blobDigestSkipped event is fired when digest is not computed due to threshold
• Added a cache for token authentication lookups, avoiding a directory query on every authenticated request.