tonguepipe v0.2.0

* Delete integration test data directories on teardown (70d5c65)
* Match VEX product purls the same way in both guards (f82184c)
* Allow /data in the image assertion, and require it to be empty (5ada3aa)
* Create a /data dir in the image with correct ownership for named volumes to work (136cf67)
* Refuse to release while any pin is stale (f89c76b)
* Install Debian packages from a pinned snapshot, and upgrade them (cdc981b)
* Bump PyInstaller to 6.22.3 (a6227be)
* Improved release notes (2cf7016)
* Assess every scanner finding in openvex.json (1a72321)