rage: alle weergawes en ouer weergawes

## rage
### Fixed
Armored files that contain an empty final line are now correctly rejected.

## age
### Fixed
`age::armor::ArmoredReader`:
- It now correctly implements the intended strict parsing profile (initially implemented in 0.9.0) by rejecting an empty final line.
- The async API now correctly rejects some classes of truncated files that previously would cause it to hang.

Changed
- Recipient and identity files are now limited to at most 16 MiB, and SSH keys are now limited to at most 16 kiB, matching the Go implementation.

Fixed
- Plugin encryption and decryption no longer panic when a plugin sends certain invalid responses.
- Decryption with an encrypted SSH key no longer panics when given an empty passphrase.

Security
Fixed a security vulnerability that could allow an attacker to execute an arbitrary binary under certain conditions. See GHSA-4fg7-vxc8-qx5w. Plugin names are now required to only contain alphanumeric characters or the four special characters +-._. Thanks to ⬡-49016 for reporting this issue.