TaskProcessing callback authorization bypass allows ex-members to post as Assistant Talk Bot

Summary

An authenticated user could inject messages into Talk conversations they no longer had access to by scheduling a text processing task with a callback targeting the Assistant Talk Bot. The bot did not verify that the user still had access to the target conversation before posting messages under its trusted identity. Fixed in Assistant Talk Bot version 3.3.0 by limiting bot replies to active conversation participants only.