publish new images after recent PRs are merged and tested

[szaimen]

Follow up to #7862

(add the most recent ticket for a new release here)

Tested:

(add PRs below that are potentially breaking and need to be well tested)

• mastercontainer: fix checking for AIO_LOG_LEVEL #8035
• fix: IPv6 compatibility across containers and PHP AIO interface #8019
• feat: enforce no-new-privileges for non-root containers #8018
• Aio-interface: Add "Pull new images" button while containers are running #8017
• aio-interface: fix nginx reverse proxy read timeout blocks AIO from starting consecutive containers #8016
• Add automatic cosign keyless signing to container build and promote workflows nextcloud-releases/all-in-one#97
• Remove zizmor.yml and fix workflows to pass security audit natively nextcloud-releases/all-in-one#98
• Remove zizmor.yml suppression config and fix all workflow security findings #8005
• Add cosign image signature verification before pulling images #8006
• feat: enforce read-only root filesystem and non-root user for remaining containers #8008
• Drop as much capabilities as possibile for the Collabora container #8000
• Let manual-install use WOPI URLs internal to the Docker network #7897
• feat: enforce read-only root filesystem and non-root user for remaining containers #8008
• add desec #7995
• aio-interface: handle SSH key authorization error explicitly in remote backup setup #7997
• aio-interface: extract Nextcloud latest-major upgrade logic to dedicated script and add UI trigger button #7988
• [Community Containers] Adding joplin-server #7983
• aio-interface: cache config by mtime in ConfigurationManager to avoid redundant disk reads #7956
• Add Bitwarden Lite as a new community container #7814
• docs: add warnings about IP address and self-signed certificate limitations #7693
• Add support of overleaf as community container #6914

Tasks to do for new release:

• make sure to merge any Helm Chart Updates PR before continuing with the list below (https://github.com/nextcloud/all-in-one/pulls?q=is%3Apr+is%3Aopen+helm+)
• increase the version number in https://github.com/nextcloud/all-in-one/blob/main/php/templates/includes/aio-version.twig
• build new images. See https://github.com/nextcloud/all-in-one/blob/main/develop.md#how-to-build-new-containers
• do a last smoke test using the develop channel (See https://github.com/nextcloud/all-in-one/blob/main/develop.md#how-to-test-things-correctly)
• test if collabora opens
• Run E2E test and wait for it to finish. See https://github.com/nextcloud/all-in-one/actions/workflows/playwright-on-workflow-dispatch.yml
• deploy from develop to beta. See https://github.com/nextcloud/all-in-one/blob/main/develop.md#how-to-promote-builds-from-develop-to-beta
• tag a new release here on github which fits the version number (and use vX.Y.Z as tag and title + Beta, use the autogenerated changelog. Important: also add the included Nextcloud version manually into the body of the release, e.g. Nextcloud 26.0.2 is included but new instances can install Nextcloud 27 directly) and make it a pre release
• rename next milestone to the same version number
• create a new milestone that is called next
• move all open issues/PRs to that new milestone
• post in all issues and discussions that were fixed/implemented that this is now released with the new beta version and post how to switch to the beta channel (e.g. This is now released with X.Y.Z Beta. Testing and feedback is welcome! See https://github.com/nextcloud/all-in-one#how-to-switch-the-channel)
• wait a week and see if new bugs get reported and don't merge any PR into the main branch of this repo in the meantime!
• if not, publish to latest as describe below; if yes simply close this milestone and create a new one that includes the bugfixes and starts from the beginning of this guide
• deploy from beta to latest. See https://github.com/nextcloud/all-in-one/blob/main/develop.md#how-to-promote-builds-from-beta-to-latest
• Merge the automated YAML updates PR if there should be one (https://github.com/nextcloud/all-in-one/pulls?q=is%3Apr+is%3Aopen+yaml)
• change the pre-release to be a stable and the latest release and remove Beta from the title (and adjust the changelog if multiple Beta version have been pushed in the meantime without a stable release - the changelog must include all changes since the latest stable release)
• close the old milestone