v0.7.8

<!-- Release notes generated using configuration in .github/release.yml at v0.7.8 -->

## What's Changed
### Features
* feat(network): scope secret substitution to specific header fields by @jbms in https://github.com/superradcompany/microsandbox/pull/1639
* feat(cli): add --mount-disk to msb restore by @0xpolarzero in https://github.com/superradcompany/microsandbox/pull/1733
* feat(exec): add runtime-owned detached jobs by @appcypher in https://github.com/superradcompany/microsandbox/pull/1774
* feat(tls): add opt-in application certificate trust helper by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1782
* feat(cli): support ranges in published ports by @GodBlf in https://github.com/superradcompany/microsandbox/pull/1776
* feat(snapshot): configure filesystem state limits by @0xpolarzero in https://github.com/superradcompany/microsandbox/pull/1751
### Fixes
* fix(db): preserve SQLite locks during Linux identity checks by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1766
* fix(filesystem): update cached paths after Windows directory renames by @x0day in https://github.com/superradcompany/microsandbox/pull/1769
* fix(metrics): follow live memory resizes in memory limit and usage by @IIITManjeet in https://github.com/superradcompany/microsandbox/pull/1679
* fix(network): reject truncated hpack blocks before decoding by @gregwebs in https://github.com/superradcompany/microsandbox/pull/1738
* fix(storage): repair cleanup and snapshot recovery by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1790
* fix(runtime): keep the relay running when a local client's arena closes mid-route by @0xpolarzero in https://github.com/superradcompany/microsandbox/pull/1796
* fix(snapshot): refuse disk restores that would silently drop host mounts by @0xpolarzero in https://github.com/superradcompany/microsandbox/pull/1735
* fix(storage): finish Windows cleanup and usage accounting by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1797
* fix(snapshot): allow disk-only restores from snapshot archives by @0xpolarzero in https://github.com/superradcompany/microsandbox/pull/1799
* fix(ci): repair shared cleanup and managed-job failures by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1806
### Documentation
* docs: clarify Rust code readability guidelines by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1794
### Dependencies
* chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 in /sdk/node-ts in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/1770
* chore(deps-dev): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/1784
* chore(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/1785
* chore(deps): bump libkrun to 0.1.41 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1800
### Maintenance
* chore: refresh lockfiles after v0.7.7 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/1768
* chore(release): bump microsandbox to 0.7.8 by @appcypher in https://github.com/superradcompany/microsandbox/pull/1777


**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.7.7...v0.7.8