Release 1.3.1

- exclude netty-nio-client (the AWS SDK async transport) from the s3
  dependency: only the synchronous S3Client is used, so the Netty stack was
  unreachable code carrying 9 known vulnerabilities (4 High, 5 Medium)
- GitLab dependency-scan job now prints the OSV report instead of aborting
  under set -e before reaching it