Fix lost form submissions on archives, the unlocked update finish and six more

Update Symfony to 7.4.23 (12 advisories in 8 packages).

- A form can be sent from /beitraege, /kategorie/... and /schlagwort/...;
  it answered 404 before anything was stored or mailed.
- Booleans reach the database as integers, so MySQL in strict mode
  accepts form submissions, task switches and plugin states.
- A stepped form with a required multiple choice shows its message
  instead of stopping on a TypeError.
- The second update step runs under the update lock; a concurrent
  finish no longer rolls a successful update back.
- Accordion entries and gallery images can be selected from the
  editor panel again.
- Category and tag names are escaped in the archive heading.
- Restoring a published page from the bin needs the publisher role.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>

public/assets/form-steps.js

@@ -159,8 +159,14 @@
         if (group.closest('[data-inactive]')) continue;
         const note = group.querySelector('.field-error[data-live]');
         if (!group.querySelector('input:checked')) {
-          if (!note) group.append(Object.assign(el('p', 'field-error', t('chooseOne', 'Bitte wähle mindestens eine Option.')), { dataset: { live: '' } }));
-          else note.hidden = false;
+          if (!note) {
+            // dataset lässt sich nicht als Ganzes zuweisen: Object.assign warf hier, und „Weiter“
+            // tat ohne Meldung nichts.
+            const hint = el('p', 'field-error', t('chooseOne', 'Bitte wähle mindestens eine Option.'));
+            hint.dataset.live = '';
+            hint.setAttribute('role', 'alert');
+            group.append(hint);
+          } else note.hidden = false;
           group.classList.add('has-error');
           group.querySelector('input')?.focus();
           return false;