6.3.0

[CheeseCake87]

• fix missing raise on scope_import is None check in process_folder_file_scope
• use context manager for multiprocessing.Pool in authenticate_password to stop worker leak
• fix disable_default_fail semantics on checkpoint_callable — default now aborts with fail_status
  when no fail handler is set (previously it silently called the protected view)
• use secrets.compare_digest for bearer token comparison in BearerCheckpoint
• mix secrets.token_hex entropy into generate_csrf_token output
• ImpBlueprint.import_resources now routes through cast_to_import_str, fixing import paths for
  nested resource folders
• preserve order when deduping scoped import results (dict.fromkeys instead of set)
• URL-encode username/password when building database URIs to avoid breakage on special characters
• chain ImportError re-raises with from e to preserve the original traceback
• add testing for checkpoints