- Upgrades Open Runtimes executor from 1.1.2 to 1.3.1, fixing symlink and secret leakage vulnerabilities.
- No schema changes; upgrade replaces images and recommends rotating APP_EXECUTOR_SECRET.
- Same console version as 2.7.0; upgrade via same command or by updating the Docker image.