FEDORA-2026-429edf2dcf

Upstream update to v0.31 with fixes to CVE-2025-67603 and CVE-2025-67858.

• CVE-2025-67603: Add PolicyKit authorization to D-Bus methods.
• CVE-2025-67858: Verify interface input parameter on D-Bus methods.
• Security hardening:
  • Add ProtectSystem=full to all systemd service files. This changes /etc to read-only for all Foomuuri processes. Make sure you don't write any state files there in your startup hook or Foomuuri Monitor event hook.
  • Change umask to 022 when using --fork to fork as a background daemon process.
  • More strict IP address verify for iplist entries.