Mentorship Admin, Mailing Lists & Security Hardening

New Features

• Mentorship admin programs — Administrators now see their live program list and browse server-paged mentees on the program detail page, backed by real service data.
• Mailing list subscriptions — The My Mailing Lists view now shows join/leave controls and your current delivery mode per list.

Bug Fixes

• Security hardening — Authentication, identity resolution, log redaction, and campaign email handling are hardened to reduce data exposure; the CLA sign handoff now rejects non-HTTPS redirect targets.
• Committee roster visibility — Member visibility settings are now enforced server-side on every roster read.
• Dashboard accuracy — The Active Members card is correctly labeled, CLA emails are validated before rendering, and org access names safely escaped.
• Meetings & events — Filtering for declined recurring meetings and visa/travel fund event eligibility are corrected.
• Settings & permissions — Duplicate permission rows are collapsed for dual-role users, and developer API tokens are masked in session replays.