Bugfix release 2.28.4

This release contains two potential issues in the 2.28 major release:

- interfaces/opengl: don't udev tag nvidia devices and use snap-
  confine instead
- debian: fix replaces/breaks for snap-xdg-open (thanks to apw!)