- Alpine 3.23 → 3.24 (ships Python 3.14, not 3.12)
- patch.py: use glob + sys.version_info instead of hardcoded python3.12 paths
- Move SSL SECLEVEL=1 sed from Dockerfile into patch.py
- Tini: replace commented-out manual binary download with apk add tini
(ENTRYPOINT ["/sbin/tini", "--"] as PID 1 for proper signal handling)
- Remove dead TINI_VERSION env and commented-out lines
Sagent
