v0.7.0

Changelog

• 3e53469 Bump git-pkgs dependencies (#253)
• 41c033a Bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#252)
• ed54005 Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#251)
• 30e4052 Document upstream.debian in README and config.example.yaml (#237)
• 4fa903e Enforce cooldown on artifact downloads (#240)
• 6fcc57c Optimize cached artifact serving (#245)
• a17bdc7 Sign published container images (#227)
• 538a15d fix(container): serve cached images when upstream is unavailable (#199)
• 14f80ce fix(npm): use combined Accept header to support Artifactory upstreams (#241)
• bbea63f fix(upstream): apply authentication through shared transport (#198)
• 849500d fix: decode PURL percent-encoding in versions and package paths (#244)