master is not correct when we build a tag - I was getting a build
based on an older image.

https://go.dev/doc/go-get-install-deprecation

The base image is now debian slim 12.2 (bookworm), and haproxy is
version 2.6.12.

This requires seom additional CLI arguments in the dataplaneapi
invocation.

- libvmod-dynamic was given twice
- in the previous commit, I copy/pasta misspelled the package names

See https://github.com/swesterfeld/audiowmark/issues/40

This is the "certificate downloader" app that runs in the container
with haproxy (via haproxy's "program" configuration).

This version fixes a bug in which the downloader did not always delete
the PEM file for a deleted Secret.

The Ingress is updated by changing to a Secret with a different name.

When an Ingress is changed (same name with modified configuration)
so that Secret for TLS is changed (another Secret with a different
name), the PEM file for the first Secret is not removed from the
haproxy configuration directory.

Optionally support a parameter object to control internal service shards

See merge request uplex/varnish/k8s-ingress!8

k8s uses re2, which does not support lookaround, so this rather
complicated pattern is what I came up with to forbid vcl and
vk8s prefixes.

The shard director supports many interesting use cases, for example

- retrying backend requests on different backends

- sharding by custom keys, for example for "client stickyness"
  or cache optimization

This patch adds the option to create parameter objects for backends
using the shard director.

Each named parameter object will be created only once and associated
with all directors for which the backend configuration names them.