4.1.4 Backports

[dtrudg]

Backports from master to 4.1.4 bugfix / patch release.

• fix: use Apparmor ABI 3 on Ubuntu <23.10 #2999 (backported as fix: use Apparmor ABI 3 on Ubuntu <23.10 (release-4.1) #3000)
• fix: avoid redundant extraction / copies of tarballs / layouts #2935 (backported as fix: do not copy local OCI images to layout (release-4.1) #3030)
• fix: avoid unneccesary temporary layout during build --oci #2936 (backported as fix: avoid unneccesary temporary layout during build --oci (release-4.1) #3032)
• fix: copy relative symlinks correctly between stages #2924 (backported as fix: copy relative symlinks correctly between stages (release-4.1) #3031)