debian has 1.2.0-1 and our fix was a67c601b0ca4bb1d605164746a929ec74cdc8ebb

master is not correct when we build a tag - I was getting a build
based on an older image.

https://go.dev/doc/go-get-install-deprecation

The base image is now debian slim 12.2 (bookworm), and haproxy is
version 2.6.12.

This requires seom additional CLI arguments in the dataplaneapi
invocation.

- libvmod-dynamic was given twice
- in the previous commit, I copy/pasta misspelled the package names

See https://github.com/swesterfeld/audiowmark/issues/40

This is the "certificate downloader" app that runs in the container
with haproxy (via haproxy's "program" configuration).

This version fixes a bug in which the downloader did not always delete
the PEM file for a deleted Secret.

The Ingress is updated by changing to a Secret with a different name.

When an Ingress is changed (same name with modified configuration)
so that Secret for TLS is changed (another Secret with a different
name), the PEM file for the first Secret is not removed from the
haproxy configuration directory.

Optionally support a parameter object to control internal service shards

See merge request uplex/varnish/k8s-ingress!8