Cross-subscriber disclosure via re-entrant synchronous batch state

Information disclosure in Ash Project AshGraphql 1.4.0 through 1.10.1 allows remote authenticated users to read another subscriber's records. The do_send/5 function reuses an unscoped :batch_resolved process-dictionary value during a re-entrant synchronous publish, then sends that outer batch to the inner topic. Exposure requires subscriptions, a resolver that emits another Ash notification, and the :backpressure_sync or :noproc path; the original batch is also dropped.