BTCPay merges fix to restrict broad API key permissions

BTCPay merged a fix on October 19 to restrict broad store-scoped API keys from accessing server-wide or account-wide functions. As of October 26, version 2.4.5 remains the latest release and still contains the earlier permission checks. The change narrows a fallback that previously allowed accepting grants from any store, now requiring store-specific permissions for server-level access.