litellm v1.103.8

LiteLLM v1.103.8 rotates the cosign key used to sign its Docker images and Helm charts, and artifacts no longer verify against the old key. Teams that check signatures in CI or enforce them through admission controllers will see pulls of the new release rejected until the new public key is in their policy. That is the intended behavior of signature pinning, but it turns a routine version bump into a deployment change that someone has to make on purpose. The release also fixes the OpenTelemetry callback for OpenTelemetry 1.44 and later. It removes the eMudhra root certificate authority from the trusted bundles it ships, which changes which TLS certificates the proxy accepts by default. Operators who mirror images internally need to update the key in every policy that checks them before promoting the release.