This update tightens access controls for electronic signing documents, templates, requests, and audit logs so users can only see or change information they are authorized to access. It also removes an outdated signing role and protects sensitive signer data such as access tokens, IP addresses, location details, and private fields.

rewrite security.xml
      group_sign_employee is removed
    sign.template:
      decouple "favorited_ids" and permissions
      add "invited_ids" to get read permission of a template
      "invited users", "template access group", "user_id(responsible)", "creator" and "group_sign_manager" can edit template
    sign.request:
      "creator" and "group_sign_manager" can edit the sign.request
      followers, signers, and sender can read the sign.request
    sign.log:
      sign.request's followers, signers, and the sender can read log without IP and geo locations
      group_sign_manager can read all logs with IP and geo locations
    
    before:
    1. the "group_sign_employee" is added from task-2267471.
       But now the only difference between "group_sign_employee" and "group_sign_user" is:
       we only hide "UPLOAD A PDF TO SIGN" button for "group_sign_employee" which actually cannot prevent "group_sign_employee" from owning a template.
       We decide to remove this group.
    2. some rules are redundant and can be removed
    3. the behavior of security becomes contradictory sometimes after adding many features.
       For example a "group_sign_user" can see a sign.request if he is in the "favorited_id" or is a follower.
       But he can read/write/unlink all sign.request.items in the debug mode from Sign -> Configuration -> Signature Requests Items
    4. We protect many models only from UI.
       For example, a "group_sign_user" can only see sign.request if he is in "favorited_ids" or "group_ids"(template access group).
       However, he can read/write all sign.request.items of other users.
       Also sign.request.item.value can be written/unlinked by any user.
    5. the creator/responsible of a template may lose his read/write permission of his records by removing himself from "invited users"(or unclick "favorite" star button).
       The creator of sign.request may lose his read/write permission of his sign.reqeust by removing himself from the follower list.
       These actions cannot undo.
       And when they lose the read permission, our current framework will immediately trigger an access error, which is confusing and not good for UX.
 
task-2618406

Uploading and validating documents for extraction now happens in the background, reducing wait times when users send invoices, expenses, or recruitment documents for OCR processing. This improves day-to-day usability by letting users continue working instead of waiting for document processing to finish.

Timesheet grids now keep empty rows at a consistent height, making lists easier to scan. The system also recognizes a user's frequently used project across all timesheet views, reducing repeated project selection when entering time.

In this PR done following changes:
- adds an empty div in empty rows of grid view so the empty line height will be the
same as other lines.
- If the last five timesheets belong to the same project then that project is considered
a favorite project. Currently, this feature is only in the timesheet's grid. Now done in
all view.

task-2861376

This update refreshes the spreadsheet engine with visual improvements for charts and scorecards, including better styling, backgrounds, and layout behavior. It also fixes cases where scorecard content could be clipped and where merged cells kept styles they should no longer have.

### Contains the following commits:

https://github.com/odoo/o-spreadsheet/commit/2c403733 [IMP] spreadsheet: remove unused exports
https://github.com/odoo/o-spreadsheet/commit/53ad6a9a [IMP] spreadsheet: remove unused constants and functions
https://github.com/odoo/o-spreadsheet/commit/c05aae35 [IMP] scorecard: inherit cell style for key value and baseline
https://github.com/odoo/o-spreadsheet/commit/66569be8 [IMP] chart: use cell color as chart background color
https://github.com/odoo/o-spreadsheet/commit/c714bce8 [FIX] scorecard: chart background above figure borders
https://github.com/odoo/o-spreadsheet/commit/81ace0ea [FIX] scorecard: make sure the scorecard content isn't cut
https://github.com/odoo/o-spreadsheet/commit/586cde2b [IMP] scorecard: title positioning and baseline mode
https://github.com/odoo/o-spreadsheet/commit/f2aaf24e [FIX] merge: cells overridden by merge should lose their style

The event track scheduling view now separates unscheduling from permanent deletion. Users can remove a session from the Gantt schedule without deleting it, while a dedicated bin icon with confirmation handles full deletion to reduce mistakes.

…mprovement

5) Remove button in Gantt view
The remove button is now unscheduling the track instead of deleting it.
A bin icon has been added on the right that delete the track (with delete confirmation modal)

This update replaces several custom styling helpers with standard Bootstrap alternatives across multiple Odoo apps. It helps keep the interface more consistent and easier to maintain, with little expected change for end users.

Refine and adapt BS default utility classes.

requires:
- https://github.com/odoo/odoo/pull/97051

task-2918463

This fix makes several automated product walkthroughs finish in a clean, stable state instead of stopping while a form is still being edited. It improves test reliability across accounting, barcode, rental, signing, knowledge, and other areas, reducing false failures and helping teams ship changes with more confidence.

Cf odoo/odoo#96517

This update removes redundant checks that caused extra background work without changing what users see. It should make affected operations slightly more efficient and reduce avoidable system load.

Making a `exists()` on a record got by a `search()` is useless and
lead to a extra useless query. Remove them.

Follow up on https://github.com/odoo/odoo/pull/84452/ Method was renamed to no longer request a confirmation. Forward-Port-Of: odoo/enterprise#30091

Follow up on https://github.com/odoo/odoo/pull/84452/

Method was renamed to no longer request a confirmation.

Forward-Port-Of: odoo/enterprise#30091