chore: prepare CHANGELOG for v3.8.8 release

[richardwooding]

Prepares the CHANGELOG for the v3.8.8 patch release.

Included since v3.8.7

• Dependencies: testcontainers-go (+ postgres/mysql/gcloud modules) 0.42.0 → 0.43.0 (chore(deps): bump github.com/testcontainers/testcontainers-go/modules/mysql from 0.42.0 to 0.43.0 #148, chore(deps): bump github.com/testcontainers/testcontainers-go from 0.42.0 to 0.43.0 #149, chore(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres from 0.42.0 to 0.43.0 #150, chore(deps): bump github.com/testcontainers/testcontainers-go/modules/gcloud from 0.42.0 to 0.43.0 #152); modernc.org/sqlite 1.52.0 → 1.53.0 (chore(deps): bump modernc.org/sqlite from 1.52.0 to 1.53.0 #151)
• CI fixes (ci: fix dependency-update permissions and fuzz job timeout #153): Dependency Update workflow granted contents: write; Fuzzing job timeout-minutes raised to 45

Patch bump — dependency updates and CI-config changes only, no library API changes.

After merge, tag v3.8.8 will be pushed to trigger the release workflow.

🤖 Generated with Claude Code