* origin/master: (43 commits)
  fixup! component/imagemagick: version up 7.1.1-20, including security fixes.
  component/imagemagick: version up 7.1.1-20, including security fixes.
  component/freetype: version up 2.13.2, including security fixes.
  component/ghostscript: version up 10.02.0, including security fixes.
  component/libtiff: version up 4.2.0-1+deb11u4.
  component/trafficserver: version up 9.2.2.
  component/openssl: version up 1.1.1w, including bug and security fixes.
  stack/erp5: drop needless rsvg-convert.
  component/file: version up 5.45.
  component/xorg: version up libX11 1.8.7, including security fixes.
  software/theia: require credentials to serve the manifest
  rapid-cdn: Pick up fixed kedifa 0.0.7
  rapid-cdn: Fix logrotate-setup-validate race-condition
  component/theia: version up theia 1.42.1
  component/nodejs: version up 18.18.0
  component/git: version up 2.42.0
  stack/slapos.cfg: version up eggs (requests 2.31.0 and friends)
  rapid-cdn: Handle correctly wildcard domains
  software/mail-server: remove PID files created by dovecot and postfix
  component/ca-certificates: version up 20230311
  ...

See merge request nexedi/slapos!1443

See merge request nexedi/slapos!1437

favicon, manifest and service worker do not need to be public, for
manifest it's required to explicitly make the link use credential.