some bug fixes and improvements

What's Changed

• go.mod: fix GHSA-mvff-h3cj-wj9c by @rchincha in #353
• ci/cd: added a 'make verify-config' target so that example configurat… by @peusebiu in #357
• ci/cd: upgrade golang to 1.17 by @rchincha in #354
• [Identity-based Authorization] Add an option to specify a policy for … by @peusebiu in #223
• Added storage latency histogram metric closes #279 by @adodon2go in #342
• build: split functionality into separate binaries by @rchincha in #360
• Fix cli version showing help message, closes #361 by @peusebiu in #363
• sync: Added support for syncing notary/cosign signatures, closes #261 by @peusebiu in #330
• perf: add a 'zb' binary for perf testing of dist-spec registries by @rchincha in #364
• ci/cd: add continuous benchmark action by @rchincha in #365
• ci/cd: update continuous benchmark version by @rchincha in #368
• Renamed zot-exporter to zxp and added its image to zot release by @adodon2go in #369
• Fix scrub command crash by @adodon2go in #377
• update go.mod by @rchincha in #383
• controller: support rate-limiting incoming requests by @rchincha in #380
• storage: return errors instead of panics by @rchincha in #378
• Remove sync http handler, not needed anymore since added sync on demand by @peusebiu in #356
• bug: Storage used per zot repo metric is broken by @adodon2go in #386
• coverage: add failure injection framework by @rchincha in #341
• Use InsecureSkipVerify only with https upstreams by @peusebiu in #387
• ci/cd: add a license checker by @rchincha in #384
• notaryv2: fix 'notation list' by @rchincha in #390
• sync: for a prefix, allow multiple registries as a list instead of on… by @peusebiu in #349
• bench: fix test data by @rchincha in #371
• sync: periodically retry if on-demand fails inline, closes #281 by @peusebiu in #362
• ci/cd: add a basic push-pull testing using client tools by @rchincha in #396
• storage: flush/sync contents to disk on file close by @rchincha in #373
• build: parameterize arch builds by @rchincha in #382
• ci/cd: restore part of github workflow for PRs by @rchincha in #399
• ci/cd: fix build/test workflow by @rchincha in #400
• coverage: improve code coverage by @rchincha in #398
• Added config enable=true/false for extensions closes #258 by @adodon2go in #348
• test: fix ldap unit tests by @rchincha in #403
• ci/cd: count lines of code by @rchincha in #402
• search: graphql api to give detailed repo info by @shimish2 in #393
• sync: make RetryDelay and MaxRetries optional by @peusebiu in #401
• ci/cd: fix image upload pipeline by @rchincha in #407
• dependabot-alert: update 'github.com/open-policy-agent/opa' by @rchincha in #408
• fix security alerts by @rchincha in #410
• sync: pull only missing images, not everything, closes #335 by @peusebiu in #340
• gc: add a gcDelay param by @rchincha in #404
• update README.md by @rchincha in #388
• ci/cd: add a workflow to detect/close stale PRs and issues by @rchincha in #414
• codecov: upgrade from v1 to v2 by @rchincha in #428

Full Changelog: v1.3.7...v1.3.8