Release 0.1.4

• Update to Go 1.26.2
• Polish error messages and help texts, use consistent form for error reporting
• Use 'nodev' flag for all mounted dirs, use 'nosuid' for /tmp. This
  is just in case, as sandboxed processes already did not have
  capabilities to create devices or create suid binaries in /tmp.