v1.33.0

What's Changed

• quorum.yml: the private CARGO_HOME its four siblings already have, plus the lint that keeps it (infra#775) by @noahgift in #589
• ledger: book v1.32.0 — the row from the tag, the cookbook commit that locks it, v1.33.0 declared; Coverage and Benchmarks on tagged releases only (PMAT-604, closes #604) by @noahgift in #606
• file: a check asks for the declared content and mode, not just existence (--refresh left stale files; closes #600) by @noahgift in #610
• ci(nightly): build when the nightly tag is not HEAD, not on 24h commit activity (#629) by @noahgift in #630
• docs(nightly): correct how the 24h gate failed; the falsifier's commits are from 2001 (#631) by @noahgift in #632
• file resource replaces its target by rename, never in place (fixes #634) by @noahgift in #637
• ci(nightly): build Windows OpenSSL with Strawberry perl, not msys perl (closes #614) by @noahgift in #640
• mount: ownership options are checked state; drift remounts without a lazy detach (fixes #642) by @noahgift in #643
• The nightly shipped gnu-only linux binaries that need GLIBC_2.39 and never run on lambda: it now builds the static musl targets every release ships (forjar#624) by @noahgift in #646
• release: forjar 1.33.0-rc.1 (#647 + #648) by @noahgift in #650
• release: forjar 1.33.0 (promote rc.1 + #611 cross on PATH) by @noahgift in #654

Full Changelog: v1.32.0...v1.33.0