dae4cf6bb6
The #40863 intake prefilter rejected unauthorized DMs whenever an allowlist existed, so gateway pairing never ran even when the operator set telegram.unauthorized_dm_behavior: pair (which must win over the #9337 allowlist silence default). Pass those DMs through; groups stay blocked.