Release 9.4.16-lts

What's Changed

• [9.4-stable] Check allocated vs provisioned file size in metrics. by @andrewd-zededa in #3880
• [9.4 stable] Allow device access when loading OCI spec from file by @europaul in #3947
• [9.4-stable] pillar: Release CPUs on domain activation failure by @OhmSpectator in #3958
• [0.9.4-stable] GitHub Actions Add buildondemand.yml action by @uncleDecart in #4279
• [9.4-stable] Add Support for Persistent OVMF Settings in Pillar by @OhmSpectator in #4276

Full Changelog: 9.4.15-lts...9.4.16-lts