v0.12.3

Changelog

• 33b4302: Ignore goreleaser's output directory (@anderix)
• 7aa7e08: Remove ship.conf; the release apps read ship.toml (@anderix)
• 73ddd1f: Retire the release workflows (@anderix)
• aaf111c: Run CI by hand: workflow_dispatch instead of push and pull request (@anderix)
• a3e08dc: Say when the token and contacts are stored unencrypted (@anderix)
• 0362679: Store the token and contacts unsealed when atrest's key would not survive a reboot (@anderix)
• 861fbc7: chore: refresh dependencies (@anderix)