Release: v1.4.8

What's Changed

• fix(bindings): Apply with_system_certs to Config builder() API by @goatgoose in #4456
• refactor: make memmove vs memcpy behavior clearer by @lrstewart in #4447
• refactor: clang-tidy null deref and undefined mod by @jmayclin in #4436
• build: remove unnecessary includes by @jmayclin in #4451
• feat: Add FIPS mode getter API by @goatgoose in #4450
• style: fix declarations without initial value by @jmayclin in #4404
• Add s2n_stuffer_shift by @lrstewart in #4458
• refactor: UBSAN build and address out of bound reads by @jmayclin in #4440
• feat: Add additional EC key validation for FIPS by @goatgoose in #4452

Full Changelog: v1.4.7...v1.4.8