Thirsty-Lang 0.8.6 repairs a self-disclosed authorization-bypass finding

Release patches CR-CONTEXT-RESOLUTION-INTEGRITY, a critical finding tagged confirmed_authorization_bypass in the Bootstrap Competence Register. The maintainer's own docs record the repair as implemented but pending independent acceptance.