Fix Vast.ai offer order in `dstack offer --fleet` (dstackai#3897)

Order by score rather than by price, the same way
offers are already ordered in apply plans and
`dstack offer` without `--fleet`.

Fix unreleased `global_exports` lock on Postgres (dstackai#3882)

Kubernetes: add `read_only` volume property (dstackai#3838)

If set to `true`, enforces `readOnly: true` in `volumeMounts[]`

Closes: dstackai#3837

Disable go-integration-tests for release (dstackai#3791)

Verda: make startup script and SSH key lifecycle per-instance with re…

…liable cleanup (dstackai#3718)

* Make Verda startup scripts and SSH keys lifecycle symmetric

* Fix Verda test imports for Python 3.9 collection

* Update src/dstack/_internal/core/backends/verda/compute.py

Co-authored-by: jvstme <[email protected]>

* Update src/dstack/_internal/core/backends/verda/compute.py

Co-authored-by: jvstme <[email protected]>

* Update src/dstack/_internal/core/backends/verda/compute.py

Co-authored-by: jvstme <[email protected]>

* Update src/dstack/_internal/core/backends/verda/compute.py

Co-authored-by: jvstme <[email protected]>

* Fix Verda terminate tests for merge-base API args

---------

Co-authored-by: Andrey Cheptsov <[email protected]>
Co-authored-by: jvstme <[email protected]>

Tests: bump pytest-asyncio>=0.25.2 (dstackai#3733)

Fixes "coroutine method 'aclose' of <async_generator> was never awaited"
warnings in pytest logs

See: pytest-dev/pytest-asyncio#759
See: pytest-dev/pytest-asyncio#1034

Fix SELinux denials and "Text file busy" on SSH fleet provisioning (d…

…stackai#3712)

The shim binary download uses cp to copy from /tmp to /usr/local/bin/.
This causes two issues:

1. "Text file busy" (ETXTBSY) when re-provisioning without cleanup,
   because cp tries to write to a running executable. Revert to mv
   which atomically replaces the directory entry.

2. On SELinux-enforcing hosts (RHEL, Rocky), mv from /tmp preserves
   the user_tmp_t context. Add chcon to set the correct bin_t context.
   No-op on non-SELinux systems via 2>/dev/null || true.

Co-authored-by: Andrey Cheptsov <[email protected]>
Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>