v0.23.0

⚠️ Breaking changes

• release: sign checksums.txt as a Sigstore bundle for cosign v3
• release: cut releases by pushing a tag, not by dispatching the workflow

Documentation

• ci: correct comments that no longer describe the code beneath them

Build & tooling

• deps: bump the github-actions group with 5 updates
• release: ship one SBOM bundle instead of ten loose documents

Full Changelog: v0.22.0...v0.23.0