1.3.4 — bump runtime base to Alpine 3.24 (fixes freetype CVE-2026-23865 and fontconfig CVE-2026-34085)