* postgresql_privs: allow lowercased PUBLIC role * add changelog fragment * improve CI * fix changelog fragment