v4.5.0

• A Linux release stays rebuildable for good. The pinned build environment
  is now one locked package set whose sources stay fetchable indefinitely,
  replacing hand-pinned Alpine packages that eventually disappear. Rebuilding a
  release still needs only Docker and ./build.sh; the build-info.txt shipped
  with each Linux release now records a flake lock: digest in place of
  apk pins:.