Breaking changes

None

Breaking changes for preview features

When inject-files outputs to COSI, the non-verity filesystems will be shrunk.
The output artifacts behavior and the inject-files config API has changed:
- unsignedSource has been removed from inject-files.yaml. Instead, the unsigned and signed file paths are now the same.
- Unsigned files are now placed in <artifacts-dir>/<artifact-type>/<file> (previously <artifacts-dir>/<file>).
  - For example: ./artifacts/ukis/vmlinuz-6.6.96.2-2.azl3.efi instead of ./artifacts/vmlinuz-6.6.96.2-2.azl3.efi.
- A new type field has been added to inject-files.yaml.

Partial support has been added for Hierarchical Configs.
- This feature is still a work in progress. It is not recommended for use yet.
- Currently implemented features: .os.services, .os.packages, .os.users, .os.groups, .os.additionalFiles, .os.modules, .input.image, .output.image, .output.artifacts, .os.overlays, .os.selinux, .os.bootLoader, .os.uki, .os.kernelCommandLine.
Added API for downloading base images from an OCI artifact (oras).
Added API for downloading Azure Linux base images from MCR.
Added partial support for customizing Fedora 42 images.
- This feature is still a work in progress. It is not recommended for use yet.
Added support for customizing base images that have a rootfs formatted as btrfs.
- Creating new partition layouts with btrfs partitions is not supported yet.
Added API for extracting SELinux policy from image during customization.

For Azure Linux 3.0, don't enable the nrext64 feature on an /boot partitions formatted with xfs since GRUB 2.06 doesn't support that feature.
Remove requirement for having a /boot partition when /usr verity is used.
Bump golang.org/x/crypto from v0.41.0 to v0.45.0.
Be more resilient when the user changes the /etc/fstab file during custom scripts.