v0.12.0-rc.3

What's Changed

• SNP Direct DM-Verity Boot by @darracott in #1952
• tests: update test images used for cri-containerd tests by @anmaxvl in #1991
• Add CodeQL suppression for tar extraction code by @ambarve in #2006
• Update nvidia hook log file paths to use container bundle path as base dir by @katiewasnothere in #1999
• Switch to using new errdefs repo by @kiashok in #2016

Full Changelog: v0.12.0-rc.2...v0.12.0-rc.3