Pending RELEASE-NOTES for the upcoming release

This is work in progress and will change before the release goes public on 2025-02-05.

Changes:

Bugfixes:

• async-thread: avoid closing eventfd twice
• checksrc: ban use of sscanf()
• conncache: result_cb comment removed from function docs
• cookie: parse only the exact expire date
• curl: return error if etag options are used with multiple URLs
• lib517: extend the getdate test with quotes and leading "junk"
• netrc: restore _netrc fallback logic
• RELEASE-PROCEDURE.md: mention how to publish security advisories
• sectransp: free certificate on error
• strparse: string parsing helper functions
• system.h: add 64-bit curl_off_t definitions for NonStop
• tests/http/clients: use proper sleep() call on NonStop

Contributors:

Andy Pan, Christian Heusel, Christian Schmitz, Daniel Stenberg, Kevin Sun, Randall S. Becker, renovate[bot], Tamir Duberstein, Viktor Szakats