3.4.1

🔧 Build reliability

• pdfid is now vendored into the image. The Docker build used to download
  Didier Stevens' pdfid from didierstevens.com at build time. That host is
  frequently unreachable, which broke the image build and could silently ship
  production without the PDF-triage tool. The official pdfid.py (v0.2.10, from
  the DidierStevensSuite repo) now lives in docker/ and is copied straight into
  the image — builds are hermetic and never touch that host.

Housekeeping

• Reformatted scripts/gen_decision_tree.py to satisfy ruff format --check.

Full changelog: 3.4.0...3.4.1