CVE-2026-50280: Craft CMS: Authorization bypass in `entries/move-to-section` via missing target-section save check

The EntriesController::actionMoveToSection() endpoint checks only whether the current user can view the destination section, but it does not require permission to save entries into that section. A low-privileged authenticated control-panel user who can move an entry out of its current section can therefore move that entry into a different section where they have read access but no write access.