v0.5.5

## What's Changed
* chore: refresh npm lockfile after v0.5.4 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/869
* feat(sandbox): per-sandbox labels and label-based selection by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/864
* feat(runtime): stop attached sandboxes when creator process exits by @cedws in https://github.com/superradcompany/microsandbox/pull/875
* feat(metrics): attach per-sandbox labels to emitted metrics by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/866
* feat(sandbox): import oci image labels as sandbox labels by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/880
* fix(db): read connections must not create the catalog db by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/879
* feat(metrics): add --exclude-label-key to msb-metrics by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/881
* feat(protocol): agent protocol versioning foundation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/874
* ci: pin all actions by @cedws in https://github.com/superradcompany/microsandbox/pull/876
* refactor(deps): inherit internal crates via [workspace.dependencies] by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/877
* ci: group dependabot updates by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/893
* feat(ssh): tcp forwarding through the guest agent by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/878
* refactor(sdk/go)!: remove CreateSandboxDetached by @cedws in https://github.com/superradcompany/microsandbox/pull/907
* ci: fix dependabot multi-ecosystem settings by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/906
* refactor(sdk)!: use builder flag for detached creation by @appcypher in https://github.com/superradcompany/microsandbox/pull/909
* fix(sandbox): reject zero resource limits in builder by @chiehwangs in https://github.com/superradcompany/microsandbox/pull/912
* feat(python): add image management API by @appcypher in https://github.com/superradcompany/microsandbox/pull/916
* docs(sdk/go): improve docstrings for port publish funcs by @cedws in https://github.com/superradcompany/microsandbox/pull/917
* fix(network): wake poll loop after draining inbound relay channel by @wreed4 in https://github.com/superradcompany/microsandbox/pull/915
* feat(cli): group top-level help commands by @appcypher in https://github.com/superradcompany/microsandbox/pull/918
* fix(agentd): restore default guest privileges by @appcypher in https://github.com/superradcompany/microsandbox/pull/911
* fix(network/dns): return NXDOMAIN for policy-denied queries so stub resolvers fail closed by @dijdzv in https://github.com/superradcompany/microsandbox/pull/858
* chore(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/910
* feat(install): add Homebrew tap support for macOS by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/536
* feat(image): add prune for unused cached images by @appcypher in https://github.com/superradcompany/microsandbox/pull/913
* chore(release): bump microsandbox to 0.5.5 by @appcypher in https://github.com/superradcompany/microsandbox/pull/923

## New Contributors
* @chiehwangs made their first contribution in https://github.com/superradcompany/microsandbox/pull/912
* @wreed4 made their first contribution in https://github.com/superradcompany/microsandbox/pull/915

**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.5.4...v0.5.5