cvehound-spatch 1.3.3

Coccinelle 1.3.3, built the same way as before. The one user-visible consequence
is that this wheel is no longer ahead of a stock 1.3.3 on satLabel: the caching
fix this package carried since 1.3.2 was merged upstream and ships in the release
itself.

satLabel caching is upstream now

coccinelle#417 — the large
regression on rules that wrap a pattern in a function context, 35× on the rules
that trigger it — landed in 1.3.3 verbatim, so the fork branch carries seven
commits on top of upstream instead of eight and the README's list of deviations
shrinks by one. Nothing changes for anyone installing this package; it is simply
no longer the only way to get that fix.

Everything else is unchanged

The rebase moved nothing else in the fork's diff. --zygote, exit 124 on an
engine timeout, the shareable AST cache, the memoised per-file overhead and the
max_cnf atoms-only prefilter fallback
(coccinelle#420, still
carried) are all intact, and so are the build choices: no Python or OCaml
scripting, no PCRE syntax, OCaml 5.3 with flambda -O3 and --without-zstd,
bounds checks kept.

FEATURES is still {'exit124', 'shared-cache', 'zygote'}, so there is nothing
new for a consumer to gate on — cvehound-spatch>=1.3.2.post3 already resolves
to this release.

Wheels for Linux x86_64/aarch64 (manylinux_2_28) and macOS arm64
(macosx_11_0_arm64). Needs pip 20.3 or newer to install, and diff on the
system at run time.

pip install 'cvehound[spatch]'