LiteLLM backports the 1.107.0 compromise fix to four branches and rotates its cosign key

LiteLLM published 1.103.8, 1.104.6, 1.105.4 and 1.106.3 on October 24, backporting fixes to every supported branch rather than only the latest line, after 1.107.0 was found to carry a credential stealer and backdoor. All four releases also move Docker images and Helm charts to a new cosign key from commit e82a3c6; verification with the previous key from 0112e53 now fails, so any script or admission policy pinning the old cosign.pub must be updated to the new digest e3fe3e08c44b16407fe0b37c43b4f8b603b3a0f4ee74c29e647bc022d762c2c0.