Release v0.32.0

What's Changed

• fetch pipeline: don't adjust ownership when untarring as root by @stevebeattie in #2195
• feat: Reorganize linters; improve linter output structure; add support for storing JSON results by @egibs in #2196
• build(deps): bump golang.org/x/time from 0.13.0 to 0.14.0 by @dependabot[bot] in #2174
• build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #2175
• build(deps): bump github.com/docker/cli from 28.3.3+incompatible to 28.5.1+incompatible by @dependabot[bot] in #2181
• build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #2190
• fix: add --generate-provenance to compile command by @egibs in #2202
• build(deps): bump the gomod group across 1 directory with 10 updates by @dependabot[bot] in #2201
• build(deps): bump github.com/moby/moby from 28.3.3+incompatible to 28.5.1+incompatible by @dependabot[bot] in #2183
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.37.0 to 1.38.0 by @dependabot[bot] in #2177
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #2199
• build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #2200
• build(deps): bump github.com/docker/docker from 28.3.3+incompatible to 28.5.1+incompatible by @dependabot[bot] in #2182
• chore: avoid building glibc and rust-1.86 in CI by @egibs in #2203
• chore: migrate to golangci-lint v2; add config file; address findings by @egibs in #2204
• chore: address more findings; improve QEMU host key verification by @egibs in #2205
• split/lib: move symlinks as well as files by @javacruft in #2197
• chore: fix remaining gosec findings; update local+CI golangci-lint version by @egibs in #2206
• xattrs: filter out XFS specific xattrs by @xnox in #2208
• build(deps): bump chainguard.dev/apko from 0.30.17 to 0.30.18 in the gomod group by @dependabot[bot] in #2210
• chore: pin cosign to v2.x by @egibs in #2213

Full Changelog: v0.31.9...v0.32.0