v28.4

This is a bug fix release. The following issues have been addressed:

• Fix VFIO on platforms with non-4k page size (#5450)
• Fix seccomp filter lists related to virtio-console, serial and pty
  (#5506, #5524)
• Populate APIC ID properly (#5512)
• Ignore and warn TAP FDs in more situations (#5522)
• Disallow concurrent CPU resizing (#5668)
• Use wrapping add for memory offset from instruction emulator (#5719)
• Replace unsound static mut with once_cell (#5772)
• Fix a deadlock when TDX is enabled (#5845)
• Bug fix to OpenAPI specification file (#5967)
• Error out early for live migration when TDX is enabled (#6025)