patch: apply PHP security release for CVE-2026-109618, CVE-2026-109619

We are not down, we're making sure the only remote code running here is ours.

This website is temporarily and as a precaution offline to prevent potential abuse by third parties. Two critical PHP vulnerabilities in the software used to keep this website online went public, so we're patching before anyone gets too creative. This page checks back on its own.