v0.19.1

What's Changed

• test(acceptance): fix policy install coverage manifest test name by @tas50 in #153
• fix(security): harden URL opening, tar extraction, key perms, and cinc-zero pinning by @tas50 in #154
• refactor: move chefignore + ACL merge logic into cinc-api by @tas50 in #155
• security: harden the rubyeval Policyfile sandbox glue (5 findings) by @tas50 in #156

Full Changelog: v0.19.0...v0.19.1