v1.0.0-rc4

Changelog

New Features

• 32c8296: feat(ml-kem)!: bind the KEM ciphertext into the envelope as AAD (@Nicolas-Peiffer)
• 4f1db3c: feat(scripts): add collect-jwe-samples.sh, fix shim-blind tool checks (@Nicolas-Peiffer)

Bug Fixes

• 66e5e1b: fix(scripts): report ml-kem alg and annotation sizes correctly (@Nicolas-Peiffer)

Other

• e565aa6: build(deps): upgrade gose to v1.0.0-rc2 (@Nicolas-Peiffer)
• 64c134f: build(deps): upgrade pkcs11-go, crypto11 and gose (@Nicolas-Peiffer)
• d2ca97d: build: annotate container images with the OCI description (@Nicolas-Peiffer)
• 5d1c4c3: build: make make notices non-destructive on failure (@Nicolas-Peiffer)
• adce7b0: docs(diagrams): cover ML-KEM in the KMS v2 sequence diagrams (@Nicolas-Peiffer)
• 8341ad9: docs(readme): document go install and its two limitations (@Nicolas-Peiffer)
• 4fac988: docs(schemes): measured sizes, the ML-KEM AAD, and encoding cost (@Nicolas-Peiffer)
• c6dba8b: gitignore .claude (@Nicolas-Peiffer)
• a18103d: refactor(mlkem)!: rename the kem-ct annotation to kem-ciphertext (@Nicolas-Peiffer)
• 4a4313e: test(e2e): fail fast with an install hint when grpcurl is missing (@Nicolas-Peiffer)

Thanks to all contributors!