Merge v4.9.1

This should get merged after !21 (merged) and !26 (closed)

assigned to @frankduncan

mentioned in merge request !37 (merged)

Don't merge this until v4.10.0 is also merged in, and is rebased after !37 (merged) is merged.

added 7 commits

• 56a047b7 - Update activity feed for paf assignment action (#3617)
• e4f6dda7 - Fix invoice status visibility and payment failed public message (#3616)
• 617e3a7d - Staff can upload the contract (#3614)
• dcfcd1b2 - Add customizable Header content field (#3604)
• 74d305de - Bump werkzeug from 2.2.3 to 3.0.1 (#3630)
• 9cd15200 - Add comment count to the communications tab. (#3632)
• 2366f712 - Merge tag 'v4.10.0' into ardc-merge-upstream

Compare with previous version

added 2 commits

• dfddb2cf - Update to django-3.2.23. (#3637)
• 294243ee - Merge tag 'v4.10.1' into ardc-merge-upstream

Compare with previous version

merged

mentioned in commit e4a20708