2023.8

This release stabilizes "deployment finalization locking" which
is very useful for automatic update workflows.

• sysroot: Stabilize deployment finalization, add API by @cgwalters in #3090

There's a new post-copy command which may be useful for build
systems that generate a filesystem tree outside of ostree:

• Add ostree admin post-copy command by @alexlarsson in #309

The commit logic started using reflinks (if available) which
can be a big speedup.

• commit: Try reflinks for local commits by default by @cgwalters in #3106

System root and bootloader:

• bootloader/zipl: Run in target deployment as container if needed by @cgwalters in #3104
• bootloader/zipl: No-op if run as non-root by @cgwalters in #3085
• lib/bootloader-zipl: Check for Secure Boot before zipl by @nikita-dubrovskii in #3080

Finally, ostree now ships a tmpfiles.d fragment which copies from /usr/share/factory/var to /var
by default:

• tmpfiles: Copy /usr/share/factory/var to /var by @cgwalters in #3103