Update OpenProject image in openDesk

Add default framework headers removed in secure_headers

Website deployed to include patch release notes

Release downtime announced at least 3 days before deployment

Legal documents in opf/legal are up-to-date in repo and downstream (DPA in saas)

Create next patch version

Bug fix freeze

Release candidate deployed on community

Release deployed on Cloud production

Ensure release branch builds successfully on packager.io