maru/0.6.0-r4: cve remediation (#70950)

maru/0.6.0-r4: fix CVE-2025-61725
<!--ci-cve-scan:must-fix: CVE-2025-61725-->


Advisory data:
https://github.com/wolfi-dev/advisories/blob/main/maru.advisories.yaml

---

### "Breadcrumbs" for this automated service

- **Source Code:** https://go/cve-remedy-automation-source
- **Logs:** https://go/cve-remedy-automation-logs
- **Docs:** _(not provided yet)_

Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>

Author: octo-sts[bot]

maru.yaml

@@ -1,7 +1,7 @@
 package:
   name: maru
   version: "0.6.0"
-  epoch: 4 # CVE-2025-47907
+  epoch: 5 # CVE-2025-61725
   description: a task runner to automate builds and perform common shell tasks. shares a syntax similar to zarf.yaml actions.
   copyright:
     - license: Apache-2.0