v0.12.1

• apt_repo, not apt_package
• Package versions stop coming from Dependabot
• Dependabot merges move to the organisation's sweep
• The profile is targets and names
• Retire the curl installer: apt, Homebrew, winget and cargo are the paths
• Dependabot: monthly, grouped, merged when every run on the commit is green
• Delete the Defender scan caller: the scan never predicted winget's validation
• Delete the release document: ship is the procedure
• Give the remediation path a user actually has
• Regenerate the parameter block from ship.conf
• Say Go 1.26, which is what building now takes
• deps: bump golang.org/x/oauth2 in the go-modules group (#10)
• Rename release.conf to ship.conf
• Take the commands to smoke from release.conf
• Run the arm64 packages before anybody installs them
• Add release.conf, the parameter block a script can read
• Rename ignored session note to next.txt