replace the TuxCare CVE-2026-5119 backport (Patch10018) with the vendor's
Patch1013, which carries the same soup-cookie-jar.c change and adds a
tests/proxy-test.c regression test ours did not have
all other TuxCare CVE patches are unchanged: the 21 remaining, Patch10000 to
Patch10021 less the dropped Patch10018, stay declared and applied