v0.9.5

Changelog

• ed5caf0: Pin the shell in every workflow, and the scanner beside it (#30) (@mmedum)
• a7cfb7f: Say what cosign 3 actually changed (#31) (@mmedum)
• 8ce8972: Say less in doctor, and keep a person out of the transcript (#32) (@mmedum)
• dae68df: Make the gates see what they claim to see (#33) (@mmedum)
• 1450d32: Release 0.9.5 (#34) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.