v0.5.9

Changelog

• 47e08dd cgroup: explain a rejected cpuset fence write instead of surfacing bare ENOSPC (#192)
• cd129da perf(bridge): attach and configure a TAP in one netlink message (#179)
• 13c6022 review: glue the Codec compile-time check to GenericCodec
• 07f1d69 review: loc-justify cuts — Init's always-nil error and the console ReadWriter guard
• 3542c8a vm: cpuset fence — reserve host cores from the VM population (#184) (#185)
• c4c1329 vm: derive host CPU capacity from online cores, not process affinity (#190)
• 985a070 vm: exempt clone/restore provisioning from the child VM's CPU ceiling (#186) (#187)
• 52549ed vm: mergeable guest memory for host KSM dedup (#191)
• f93dfb6 vm: per-VM cgroup v2 CPU scope with Guaranteed-at-N defaults (#182) (#183)