* Security: prevent XSS with storage path template rendering
* Security: prevent XSS svg uploads
* Security: force attachment disposition for logo
* Add suggestions from code review
* Improve SVG validation with allowlist for tags and attributes
* Allows new user args field to be null
* Coerce empty string to None for user_args JSONField
---------
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>