Import upstream v0.16.25, stripped

Upstream commit: 3f657330c0f49a015a3a372fb59669b5cccbca6d
Enterprise-only files removed or emptied: 63
Enterprise-only snippets removed: 118 in 50 files
Dangling module declarations removed: 5
Edits turning enterprise off: 25
Third-party code: 14 files, 0 not in THIRD-PARTY.md
Renamed identifiers: 67 in 19 files
Verification: clean

The same Enterprise footprint as v0.16.24. The build check is clean
apart from the expected errors in the rebuilt-feature tests. A
bug-fix release: DKIM rotation, IMAP failed-login answers, DNSBL
multi-code scoring and negative TTLs, Pyzor on short messages, queue
quotas with an empty match, RocksDB info-log rotation, and
Autodiscover schema handling.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,18 @@
+> [!IMPORTANT]
+> **If you are not an approved contributor, this pull request will be closed automatically.**
+>
+> Stalwart only accepts pull requests from approved contributors, and LLM-generated code is not accepted. Please read [CONTRIBUTING.md](https://github.com/stalwartlabs/stalwart/blob/main/CONTRIBUTING.md) before going further.
+>
+> **Discuss your change first at [support.stalw.art](https://support.stalw.art).** You can sign in with your GitHub account. If a maintainer approves the change, you will be added to the list of approved contributors and can open the pull request.
+>
+> **If this is a bug fix, also report the bug at [support.stalw.art](https://support.stalw.art).** Once a maintainer confirms it, an issue is created on your behalf.
+
+## What does this change and why?
+
+## Link to the support.stalw.art discussion
+
+## How was it tested?
+
+- [ ] I have read CONTRIBUTING.md.
+- [ ] I am an approved contributor and have discussed this change at [support.stalw.art](https://support.stalw.art).
+- [ ] Every line in this pull request was written or reviewed by me, and I can explain it.

.github/dependabot.yml

@@ -5,11 +5,6 @@
 
 version: 2
 updates:
-  - package-ecosystem: "cargo" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "weekly"
-
   # Enable version updates for GitHub Actions
   - package-ecosystem: "github-actions"
     # Workflow files stored in the default location of `.github/workflows`

.github/workflows/auto-close-issues.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Close issues from non-allowed authors
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             // Users allowed to open issues directly. All other authors will have

.github/workflows/auto-close-prs.yml

@@ -18,7 +18,7 @@ jobs:
           sparse-checkout-cone-mode: false
 
       - name: Close PRs from non-allowed authors
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');

.github/workflows/auto-redirect-discussions.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Post support portal redirect
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const discussion = context.payload.discussion;

.github/workflows/scorecard.yml

@@ -73,6 +73,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/[email protected]7.4
+        uses: github/codeql-action/[email protected]8.2
         with:
           sarif_file: results.sarif

.github/workflows/trivy.yml

@@ -36,6 +36,6 @@ jobs:
           severity: 'CRITICAL,HIGH'
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/[email protected]7.4
+        uses: github/codeql-action/[email protected]8.2
         with:
           sarif_file: 'trivy-results.sarif'