Stratos: baixar versions anteriors

Fixed
- Package licences. The Homebrew formula, Scoop manifest and winget manifest declared MIT; they now declare the project's licence, Apache-2.0 OR MIT, read from package.json (license any_of: ["Apache-2.0", "MIT"] for Homebrew, Apache-2.0|MIT for Scoop). The README badge and licence section said MIT as well, and now name both licences.
- Homebrew formula style. The formula's install step picked the binary with a case expression that failed brew style (Style/HashLikeCase, Layout/EndAlignment) in the tap's validation. It now builds the binary name from OS.mac? and Hardware::CPU.arm?.
- Tap and bucket updates. sebastienrousseau/homebrew-tap and sebastienrousseau/scoop-bucket now accept changes only through pull requests, so the 0.0.22 tap-bump and scoop-bump jobs failed to push. They now push a stratos-v<version> branch and open a pull request. HOMEBREW_TAP_TOKEN and SCOOP_BUCKET_TOKEN need Pull requests read and write in addition to Contents.

Highlights ⭐️
- New npm name: Stratos is now @sebastienrousseau/stratos, next to the author's other npm packages. Install with npm install -g @sebastienrousseau/stratos; the stratos command, binaries, Docker image and installer scripts are unchanged, and @cloudcdn/stratos stops at 0.0.21.
- Published by hand this once: npm can only trust a release workflow for a package that already exists, so 0.0.22 on npm has no npm provenance. The release artefacts below keep their SLSA attestation and Cosign signatures, and from 0.0.23 the workflow publishes to npm with provenance again.
- GitHub Action follows the release: its npm fallback installs the new name (or @cloudcdn/stratos for 0.0.21 and earlier), and its default version, stuck at 0.0.6, now tracks the release and is checked by scripts/check-versions.mjs.
- Advisories cleared: brace-expansion (dev-only, through c8) is held at 5.0.12 or later, clearing GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 and GHSA-6j4f-fj2g-mc7p. The licence is now Apache-2.0 OR MIT.
What's Changed
- chore(deps-dev): bump c8 from 11.0.0 to 12.0.0 by @dependabot[bot] in #37
- chore(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #36
- chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #35
- fix(deps): clear the high-severity npm advisories by @sebastienrousseau in #38
- chore(license): ship Apache-2.0 OR MIT by @sebastienrousseau in #39
- fix(license): restore LICENSE as a pointer to the dual grant by @sebastienrousseau in #40
- feat!: publish as @sebastienrousseau/stratos 0.0.22 by @sebastienrousseau in #41
Checksums
SHA-256 of every asset attached to this release:
4425f949b8974d431ecbe3e2da16a1ade5f194d86ec0c5d17a66e4d06e64ead0 SHA256SUMS
3504ebb49eb0d723e9f04fa446a0a0f3f9d48fa3221d6b81c161f71214503d9a install.ps1
68ee0f346a9e4a983aabb14244b55abb53db5043c44960fe93d82a6261618ac2 install.ps1.crt
6a28227a54adb35ab0eef0b2a692f39c5fa80218866e2552ec4e8880b8cbb4b5 install.ps1.sig
cb93bbc9b53b2b0da26a110f96f677a4bcad36b30c4c4d5f0caf73f3ef8ecaea install.sh
7cb35b60e19f82c6cba2cecd7ae8980aefad3cbf4b163ab9ca04fe48230473c4 install.sh.crt
74c3032896cbcdddb2953d7e88206b7ab2c9583f33018040a1b88a208ff2639e install.sh.sig
27aef1ac860e0fb616fffcddecc02df2b68c365bb05c6b148ec7165ba1b53bf3 sbom.cyclonedx.json
bc9cd7a9c6031b66d397ba452bff91055f9d5fc60cd5fbbc7714ab6f208145a4 sbom.cyclonedx.json.crt
ddc784fc4de85569573bb814ea3f12ccae7429ca72574ee2e1b3e18408a053d0 sbom.cyclonedx.json.sig
346e977753e8f9bbddb35c881a5a2f51a38a5bee2104661fe82af9cd660c5791 stratos-darwin-arm64
776106dc31503fe346df4030776710cf4c4b82def4b9583bb4d16b3e2744f231 stratos-darwin-arm64.crt
600f529e0185c5d9f3317c814f01a8354493ffb5872d26006713d03e746b8baa stratos-darwin-arm64.sig
f2ebb08cac356d45b7456ad5fac963049894e6c596897a7e70162b033ea4e292 stratos-darwin-x64
415989ad75ced0c37b2e17e54f5b8d3051f1f6021aefbe65c4f98f7ddde2db0f stratos-darwin-x64.crt
2bdb08c8a31d9cd3d664f0e9f6e4ddeb4b2ac937c572676058f9e1ae9951d83a stratos-darwin-x64.sig
a7073f96fcbe79eee2bcabddd4b3bf18ad577a7ecd5e17c0572904f6f91acc1e stratos-linux-arm64
f5e49b86c2dbe3de4d2c8708c2843414ea9d006b9ccb74ebfa7cd3b92062d78e stratos-linux-arm64.crt
68ae1c66decacf8c60c4b616f89abe12fe36512be00c85e728ccd8f787da4240 stratos-linux-arm64.sig
eddd551c44284f712b9109db34d328f8723a2da652a8911213e6a597219ac840 stratos-linux-x64
eb0871e216716f855e2e199f8ee93ff25c720ad1298a5044298ad7dd1bc737ff stratos-linux-x64.crt
da5d954ab7c78a70241f94aa307154a702587791ef15518f8d6fc00efd095f42 stratos-linux-x64.sig
beac702a0dd79f0b81a482c0a791188f7e8db86292597b339ea9b51ec5e91004 stratos-v0.0.22.intoto.jsonl
be089387dbf4b55d03f097ab056e4042ed286c63f866185ee31a0d60c42276d8 stratos-win-x64.exe
f124319250dc376d1a723cb2eb4fa8528469714876d30553d441c5995f61741c stratos-win-x64.exe.crt
460d622f33d0340eecc8770060473411fe77d76ba1c5e6959807f624f7daa53d stratos-win-x64.exe.sig
5db4f55c8d884141c1df565b99763b3df5b319c1493059d971191fb3fe2c7281 stratos.1
56dc146a6101ecda08e3c32762dffd494cfc5091c781cc7ad285f8b76c1d5