Fix cookie domain for `domain: all` on two letter single level TLD

Though this method was likely never meant to take user input, it was
attempting sanitization. That sanitization could be bypassed with
carefully crafted input.

This commit makes the sanitization more robust by replacing any
occurrances of "/*" or "*/" with "/ *" or "* /". It also performs a
first pass to remove one surrounding comment to avoid compatibility
issues for users relying on the existing removal.

This also clarifies in the documentation of annotate that it should not
be provided user input.

[CVE-2023-22794]

[CVE-2023-22795]

[CVE-2023-22796]

[CVE-2023-22792]

Disallow certain strings from `_url_host_allowed?` to avoid a redirect
to malicious sites.

[CVE-2023-22797]

Given a value outside the range for a 64bit signed integer type
PostgreSQL will treat the column type as numeric.
Comparing integer values against numeric values can result
in a slow sequential scan.

This behavior is configurable via
ActiveRecord.raise_int_wider_than_64bit which defaults to true.

[CVE-2022-44566]

Fix ServerTiming in Threads, use single subscriber 

This reverts commit 31925f55.

This was causing tags to leak to the broadcast logger when
`tagged` without a block is used.

Fix #45854.

Fix eql? of AC::Parameters to match hash

Fixes ActiveStorage proxy downloads of files over 5mb in S3-like storages

Fix typo in "Configuring Rails Applications" guide

[ci-skip]

Add missing documentation for Rails.error

Make internal links to `errors` in the Active Record Validations guide

Lock que version to v1 until #45899 is resolved

Backport #45851

Install specific version of codespell

Stop gap solution for long output on test cases

Fixes #45868 by Using #to_hash to serialize `AS::HWIA` for stored attributes

Backport Redis 5.0 compatibility (7-0-stable)

Redis 3.0 compatiblity is preserved in Action Cable

Redis 4.0 compatiblity is preserved in Active Support

Replace MutexHook by MonitorHook to allow reentrancy

Fix actiontext js not pointing to compiled file

This makes "Connection Pool Options" a subsection of "Configuration",
instead of a subsection of "ActiveSupport::Cache::Store".  This also
makes "Custom Cache Stores" its own section after all of the built-in
stores, instead of a subsection of "ActiveSupport::Cache::Store".

(cherry picked from commit 0c97d1db)

(cherry picked from commit 2e9efbb7)

(cherry picked from commit 7563be4d)

(cherry picked from commit 7e884e29)

(cherry picked from commit a95438ca)

(cherry picked from commit fc7225af)

(cherry picked from commit b55f079f)

(cherry picked from commit dce8b7fe)

(cherry picked from commit 992ead1d)

(cherry picked from commit 6e94889b)

(cherry picked from commit 32c169d0)

(cherry picked from commit b13107fe)