chore: release 0.14.0

[flant-team-sysdev]

🤖 I have created a release *beep* *boop*

0.14.0 (2026-08-05)

Features

• server: build via BuildKit client when buildkitd address is set (#409) (43912ab)
• server: configure buildx driver via plugin configuration (a805601)
• server: configure buildx driver via plugin configuration (#419) (c68e805)

Bug Fixes

• bump dependencies to clear all known CVEs (#402) (31430e1)
• ci: grant actions: read to website converge workflows (#406) (f567b92)
• point trdl.yaml at the builder image rebuilt on Go 1.25.12 (#404) (da5f59e)
• server: make the driver tests hermetic and guard the release forwarding (c1bc889)
• server: reject the buildx settings when a buildkitd address is set (ff76158)
• server: treat blank build backend settings as unset and report unused ones (17edc75)
• server: unhang the release on a long log line and a passwordless certificate (#416) (82fcfa0)

---

This PR was generated with Release Please. See documentation.