GHSA-jqj2-x4c5-jfxm: Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

A bug in Coder's devcontainer recreate endpoint allowed users with read-only workspace access to destroy containers and cause service outages, because the endpoint only checked read permissions instead of also checking update permissions like similar endpoints do. Exploitation requires the attacker to already have low-privilege access to the target workspace.