some bug fixes and features

What's Changed

• feat(cve): better distinguish max severity on an image by @andaaron in #918
• chore(deps): fix dependabot alerts by @rchincha in #919
• refactor(tests): removed globals from digest test, more hardcoded digests by @chofnar in #923
• fix(sync): also sync on demand digests, not only tags, closes #902 by @peusebiu in #932
• test: Add cosign and notations bats tests by @nicoldr in #929
• chore(deps): fix dependabot alerts by @rchincha in #945
• refactor: changed github issue templates to yml form by @chofnar in #949
• test(bats): added regclient artifact commands by @peusebiu in #938
• refactor(cache): Add database interface for blob paths + refactor BoltDB to use interface by @chofnar in #667
• bug: fixed image size not counting config and manifest sizes by @aokirisaki in #937
• feat(artifact): add OCI references support by @rchincha in #936
• chore(deps): fix dependabot alerts by @rchincha in #965

Full Changelog: v1.4.3-rc4...v1.4.3-rc5