Deterministic builds

[tfa]

Musl target is also more secure. A quote from yourself one year ago:

@dirvine

Yes that is the default when using a musl target. We should always do that IMO as it is way more reproducible. It is also safer as well IMO as dynamic libraries are a security nightmare as you can possibly infect an so lib easier than the app. In any case static musl is way better for security. It can be slightly slower (debatable) but that price is well worth paying.