chore: change 'Accounts_AvatarBlockUnauthenticatedAccess' default value from false to true

[julio-cfa]

Proposed changes (including videos or screenshots)

As part of a security by default approach, we should deny unauthenticated access to avatars by default. This PR changes the default value from false to true.

EDIT: in order to properly handle anonymous access, instead of returning 403 and Forbidden, this PR alters the logic to return an avatar with the user / room initials.

Issue(s)

N/A

Steps to test or reproduce

N/A

Further comments

N/A

[changeset-bot]

⚠️ No Changeset found

Latest commit: cd7d8a4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dionisio-bot]

Looks like this PR is ready to merge! 🎉
If you have any trouble, please check the PR guidelines

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 59.40%. Comparing base (17f3d5e) to head (cd7d8a4).
Report is 1 commits behind head on develop.

Additional details and impacted files

@@           Coverage Diff            @@
##           develop   #33035   +/-   ##
========================================
  Coverage    59.39%   59.40%           
========================================
  Files         2541     2541           
  Lines        63178    63176    -2     
  Branches     14220    14220           
========================================
  Hits         37527    37527           
+ Misses       22936    22934    -2     
  Partials      2715     2715           

Flag	Coverage Δ
unit	76.02% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.