Release stellar-cli 25.1.0

[github-actions]

What

Stage a new release for stellar-cli 25.1.0. builds.json is updated with the rust base pins auto-picked from the current last two minor stable releases on rust-lang/rust; each pin resolves the upstream base image digest at append time (<label>@sha256:<digest>).

Why

Triggered by @fnando in https://github.com/stellar/stellar-cli-docker/actions/runs/27769103456.

What is next

See RELEASE.md for the full release process.

Push any further changes to the release/v25.1.0 branch that are needed in this release (for example, adjusting the paired rust_versions if the auto-pick isn't right for this iteration).

When this PR is reviewed and merged, create a GitHub Release by going to:

https://github.com/stellar/stellar-cli-docker/releases/new?tag=v25.1.0&title=25.1.0&target=main

The publish workflow fires on the release-published event and:

• Builds and pushes per-arch images for every declared (cli, rust base) pair; tags are mutable, so an existing tag is overwritten in place
• Generates SLSA build provenance + SPDX SBOM attestations on each built image (buildx-native + GitHub-native chains)
• Re-points the :25.1.0 and (if newest) :latest aliases
• Attaches the SBOM and provenance files to the new GitHub Release, with per-arch digests in the body

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.