Without this, an attacker might infer the password length based on a
screenshot and the time of day, as rand() is a deterministic PRNG without
any runtime entropy sources.

After this change, the attacker will additionally need the exact
microsecond-accurate time of day, and the process ID.

We may alternatively move to using /dev/urandom or getrandom here, but this
does not seem worth the effort, given an attacker can learn the same info by
pointing a video camera at screen or keyboard, or a microphone at the keyboard.

Also stop accidentally including some .o files in the tarball; found in the
checking done by the script.

rpolzer prefers to be uploader, so mteich will stay maintainer.

- make rpolzer maintainer, mteich uploader to avoid NMUs.
- remove whitespace at EOL in changelog.
- make changelog entry fit the lintian limit of 80 characters.

lintian-overrides only contained an override for binary-without-manpage,
but xsecurelock ships a manpage since 794a8e00 so we don't need that
override anymore.

Not very fancy yet, but should do for now.

Contribute the example saver for displaying livestream feeds.

Internal reference: b/130370819.