The last (?) v1.0.0 release candidate!

This is it! The v1.0.0 milestone is empty. Will let it simmer for a bit and then we'll have v1.0.0. Please test it!

Main changes

🤏 Reject RSA keys (for ssh-rsa) smaller than 2048 bits (#266)

🥞 Remove limit of 20 recipients per file (#139)

📜 Add age(1) and age-keygen(1) man pages (#131) — read them here!

⚔️ Fix armored encoding for files of certain lengths (#263)

Minor changes

• Add freebsd/amd64 and darwin/arm64 builds
• Use filippo.io/edwards25519 for Ed25519 to Curve25519 conversion (again)
• Check Close() error on output files (#81)
• Allow reading both passphrase and input from a terminal (#196)
• Don't warn about world-readable output for public keys in age-keygen (#267)