v2.23.0

## Highlights

This release focuses on reliability and memory efficiency: provider media uploads are now streamed instead of buffered in memory, a new pending-post workflow prevents duplicate posts, and the MCP server got a round of stability and OAuth fixes.

## 🚀 Performance & Reliability

- **Streamed media uploads** — provider media uploads now stream instead of buffering entire files in memory, dramatically reducing worker memory usage for large videos (#1835)
  - X (Twitter) videos upload in 1MB ranged chunks (#1796)
  - LinkedIn videos upload in 2MB ranges (#1786)
- **Duplicate-post protection** — a new pending-post workflow (v1.0.6) resolves the state of in-flight posts before publishing, preventing duplicate posts when a publish attempt is interrupted (#1813)

## 🔒 Security

- SSRF protection for webhooks and media-path fetches via a safe request dispatcher
- Hardened streamed-upload paths after a full audit, including guarded Reddit S3 upload response parsing

## 🔌 MCP Improvements

- Streamable HTTP is now served statelessly for more reliable connections (#1717)
- OAuth discovery metadata no longer breaks key-in-URL MCP connectors (#1781)

## ✨ Features

- Admins can now apply and cancel coupons for an impersonated user, with full translations (#1801)

## 🐛 Fixes

- Email lookups for login, forgot password and impersonation are now case-insensitive (#1805)
- Pinterest video pins now upload the actual mp4 file instead of the first media item (#1802)