GHSA-PJVX-RX66-R3FG OpenClaw: Cross-account sender authorization expansion in `/allowlist ... --store` account scoping
Summary /allowlist ... --store resolved the selected channel accountId for reads, but store writes still dropped that accountId and wrote into the legacy unscoped pairing allowlist store. Because default-account reads still merge legacy unscoped entries, a store entry intended for one account cou...