v0.2.0: Merge pull request #78 from vrothberg/fix-76

• Dockerfile: use Fedora registry
• Dockerfile: bump to F33
• update sha256sums of rpms
• support multiple extra sources
• Add Security Policy
• more of a dynamic spec and srpm
• Makefile: srpm target for copr
• BuildSourceImage: sort created tar entries by name
• *: remove building from a remote image reference
• rpm: fixed the file ownership
• BuildSourceImage: include annotation for "license"
• BuildSourceImage: dnf or yumdownloader will suffice
• test: checksums changed? and slow tests?
• BuildSourceImage: jq map merges need a paren
• layout: document the contents of a source image
• test/12-from_rpms_push.bats: skopeo-copy from registry
• test: push to a local registry
• README: build badge: point to Cirrus
• Add Code of Conduct
• *: fix the test failures
• migrate to Cirrus CI
• Cirrus: Add placeholder configuration
• BuildSourceImage.sh: quiet the output
• Remove escapes from string side of substitutions
• README: point to non-vbatts container repo
• rpm: crafting an rpmspec for this tool
• test: fixing the symlink path, changes the checksum of the tar layer
• BuildSourceImage: naive relative symlink path
• *: add a doc for development
• BuildSourceImage: expose "unpack" as subcommand
• BuildSourceImage: catch return code and exit
• travis: use bionic and the default bats
• Makefile: no need to shell to realpath
• Dockerfile: no default output directory
• BuildSourceImage: insert layer with umoci, if present
• BuildSourceImage: use umoci for OCI layout, if present
• README: add the quay build status