First pinned SILO release, numbered to follow upstream minio/pkg's 3.11 line.
The correspondence is to the line, not byte for byte: this fork deliberately
does not take the AIStor action vocabulary, so the s3tables and vectors action
sets stay narrower than upstream's, and the dependency set is trimmed.

Supersedes the earlier v3.7.0, v3.8.0 and v3.8.1 tags, which reused version
numbers upstream also published with different content.

Contents relative to the fork point: LDAP StartTLS and connection-lifetime
fixes, certificate watcher shutdown on every exit path, seeded RNG subkey
initialisation, xtime duration marshalling, and the minio/minio#20449
bucket-write boundary -- twelve bucket-level writes withheld from object-only
("bucket/*") grants, with Deny statements and NotResource exclusions untouched
and the protected path requiring both the bare and the historical resource form
so the change can only remove permissions, never add one.
MINIO_API_LEGACY_BUCKET_RESOURCE_MATCH=on restores the historical matching.