v1.5.8-stable

## What's Changed

> [!NOTE]  
> Supersedes v1.5.7-stable, so including its release notes for visibility.

 **Security**:
 - [High] TOTP re-enrollment via `POST /api/auth/otp/generate` and `POST /api/auth/otp/verify` no longer allows anonymous callers to replace an existing second factor using only the account password; reset or replace requires an authenticated self or admin session (first-time enrollment without MFA unchanged) (GHSA-qx86-4v5r-26g5) -- thanks @tao0845.

 **Notes**:
 - [docker] upgraded ffmpeg version from 9.0.1 to 9.0.2

## All Changes
* updated dependencies v1.5.7-stable by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3066
* Fix TOTP re-enrollment MFA bypass (GHSA-qx86-4v5r-26g5). by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3068
* updated docker ffmpeg v1.5.7 by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3069
* fix(auth): restore existing TOTP login on v1.5.7 by @spatiumstas in https://github.com/gtsteffaniak/filebrowser/pull/3079

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.5.7-stable...v1.5.8-stable