GHSA-3p64-6gvh-82v5: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow's basic-auth plugin has a vulnerability where the LogInputs endpoint (used to record dataset information for ML runs) is missing from the authorization check list, allowing any authenticated user to inject fake dataset records into another user's run. While other similar endpoints like log-metric correctly block unauthorized access with HTTP 403, LogInputs bypasses this check entirely because its protobuf class is absent from the BEFORE_REQUEST_HANDLERS dictionary.