v0.4.6

Changelog

• b504dba chore(os-image): bump cocoon-agent to v0.1.6
• d57cead chore(os-image): re-pin cocoon-agent v0.1.6 SHA after tag re-cut
• 80ad17e chore: bump Firecracker baseline to v1.16.0
• 78c1e7b chore: bump cocoon-agent to v0.1.8 (warn on dbus machine-id drop failure)
• bfe361e chore: move cocoon-agent pin to v0.1.7 (re-cut v0.1.6 poisoned go.sum)
• fb005bc feat(cloudimg): parallel Range download for image pull
• ed2a18d feat(vm): signal guest CRNG reseed after clone/restore
• 257529a fix(hypervisor): don't log a killed-orphan warning for a just-stopped VM
• a20b4ab fix(vm): populate vsock socket before signaling reseed
• 2010949 fix(vm): retry reseed only on dial failure, not a live agent's rejection
• 8288ce5 fix: clamp pull_conns; surface silent reseed skips; test the retry rule
• 7e4406f refactor(utils): export SplitRanges and CopyRangeBody range helpers
• bceb09d refactor(vm): extract resolveRunningVM shared by exec and reseed
• 21d31e9 style(vm): group Handler methods above standalone reseed helpers
• d9fa4df test(utils): stop bash tail-exec flaking the SIGTERM-ignored terminate test