PostgreSQL: Port update-keys.sql to PostgreSQL

This fixes the same bug in PostgreSQL that was reported
against Oracle as bug 71040, using the same method of copying
the update-keys.sql script into maintenance/postgres.

Since all three copies of this file do the same thing, perhaps
we should find lowest-common-denominator syntax that works in
all databases to avoid redundant copies that can get out of
sync with each other.  (The Oracle and PostgreSQL versions are
already identical to each other).

The comments in the file are confusing and ungrammatical, but
they are a copy of the same language from the other copies.
Since I don't know what it is trying to say, I can't
fix it.

I have verified that this patch fixes the problem where
mediawiki could not be installed with PostgreSQL using
either the CLI or the web installer, due to SQL syntax errors.

I haven't tested the the update-keys actually accomplishes
whatever it was introduced to accomplish, though.

Bug: 72834
Change-Id: I2a0cfa3dd0751b9fb65450b1537b6e77be60009a
(cherry picked from commit 44b4b45bfa49f88f5ec92c4a445cdfe405841969)
OutputPage: Add accessors for some protected properties

Bug: T76168
Change-Id: Iee11c217b6b0d35acfdfac916814521acda2b1a4
(cherry picked from commit 0406f3d61b1bd4ac29a4017dd274e8831ad20a3b)
Merge "OutputPage: Add accessors for some protected properties" into REL1_24
Fixup 4f0b2f42419c283e8c94a5be6147d54ae7731a6b

It messed up a couple of entries in RELEASE-NOTES-1.24.

Backport of 11692cb4845daf02798e892020c71157c04c9de3 from master

Change-Id: I39160ccc4c1f7d762ab076b3ae7027a6fe0fabdb
Revert "SECURITY: Do not show log action if revdeleted" and fix UI message

This mostly reverts commit 89b793b9f72c254f0a6142952a4239fffa8ed945. It also
finishes removing of the "fld_action" field in ApiQueryLogEvents that
was begun in that commit.

Bug: T74222
Change-Id: I185e42d029905fd2781f3ccbbef0687f51234b0d
(cherry picked from commit c92210ecf58b1184ef5db967557bfb352c6ede3d)
thumb.php: Set proper output formats for messages going into HTML

* Use ->parse() instead of ->text() for wikitext messages that were
  being treated as HTML
* Explicitly specify ->parse() if no output format was set
* Document that wfThumbError() takes HTML

Bug: T76686
Change-Id: Id6e7548b2e081cfda7803772ed0395a15feb1f84
SECURITY: Fix CORS origin matching in the API

Bug: T77028
Change-Id: I68c1ee5b5a048af2aba4e710bc301b09748389bf
Updated release notes and version number for MediaWiki 1.24.1

This is MediaWiki 1.24.1 security and maintenance release

Change-Id: I9bddfcb27c8774d8cafe0d16cddbf38bff678b3c
Merge branch 'REL1_24' of https://gerrit.wikimedia.org/r/p/mediawiki/core into REL1_24
Merge branch 'REL1_24' into REL1_24_custom