8.5
ci: Limit GitHub token permissions for workflows.
install: Support Ubuntu 24.04.
do: Install pynacl in the oneclick job.