v25.3

@DaanDeMeyer

What's Changed

Use become_root_cmd() when running systemd-repart in run_shell() as well by @DaanDeMeyer in #3425
Use shutil.copy() to copy ovmf variables by @DaanDeMeyer in #3426
The dpkg architecture name for loongarch64 is loong64 by @bluca in #3428
mkosi-initrd: Add two more modules by @DaanDeMeyer in #3430
Check if list matches are empty if empty string is matched against by @DaanDeMeyer in #3429
opensuse: fix package name: btrfs-progs -> btrfsprogs by @aafeijoo-suse in #3432
Log command line for abnormal signals by @DaanDeMeyer in #3433
zypper: set $releasever variable by @aafeijoo-suse in #3434
Tools tree improvements by @DaanDeMeyer in #3436
mkosi-initrd: handle PermissionError when reading /etc/crypttab by @aafeijoo-suse in #3438
Move want_uki() check out of build_uki_profiles() by @DaanDeMeyer in #3441
mkosi-sandbox: Improve formatting of error messages by @DaanDeMeyer in #3443
Fix verity signature check in case keys are configured by @hundeboll in #3447
Treat terminal as dumb if either stdout or stderr is not a tty by @DaanDeMeyer in #3448
Various cache fixes by @DaanDeMeyer in #3446
config: add mkosi-addon by @bluca in #3449
Calculate PE section size correctly by @DaanDeMeyer in #3450
Use directory in user's home as output directory if possible by @DaanDeMeyer in #3453
Fix condition when removing duplicate files from the overlay by @DaanDeMeyer in #3451
Make secure boot keys/crts/source config universal by @labichn in #3455

Full Changelog: v25.2...v25.3