Bumps the netbsd-vm action to the SHA equivalent of 1.4.2.
Would like to get rid of this but cross doesn't work for tests for BSDs :/
Hopefully I can figure it out at some point.
* ci: test using no permissions by default for most CI jobs
* Also require production approval for a release upload
* remove build_release individual 'job'
* tweak some stuff
* driveby bump on setup-python to 6.2.0 to fix node20 warnings
* remove bsd vm check name
* ci: don't use cross for aarch64-unknown-linux-gnu
* also use ubuntu-24.04 everywhere
* fix build-deb too
* fix musl too
* yeah we can use native arm for container for deb step for musl
* fix musl issues
Clement Tsang