Merge pull request #12370 from loomio/refresh-groups-after-membership…

…-grant

Bump version to 3.0.22 and add STV beta warning

Fix private group name leak in ReportsController (GHSA-fgf5-wrx5-8j67)

Scope group_ids to current user's groups before computing all_groups
and first_year, preventing authenticated users from enumerating
private group names and IDs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Minitest conversion (#12164)

Convert test suite from rspec + factorybot to minitest + fixtures, runtime drops from 14m to 3m.

3.0.15