v0.6.4

Fixes:

• avoid panic on combined cache load #1328
• avoid goroutine leak with containerd worker #1316
• use extended agent for ssh forwarding for modern sign hashes #1270
• support runAsNonRoot in kubernetes #1344
• fix deadlock on releasing shared mounts #1355
• dockerfile: clear onbuild rules after triggering #1324