Release v1.1.4

Changelog

• 6604826 apk: guard non-RSA JWKS keys in DiscoverKeys (chainguard-dev#2190)
• a118c3d apk: verify package control hash against signed APKINDEX (chainguard-dev#2191)
• 481840f build(deps): bump chainguard-dev/actions from 1.6.14 to 1.6.15 (chainguard-dev#2182)
• 503b545 build(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 (chainguard-dev#2184)
• f5a96e1 fs: Scope all DirFS operations through os.Root (chainguard-dev#2187)
• 09b82d6 fs: strip special mode bits in OpenFile/WriteFile (chainguard-dev#2188)
• beb2867 release: fetch full history for goreleaser changelog (chainguard-dev#2192)