SECURITY UPDATE: Heap buffer overflow in RainerScript replace()
debian/patches/CVE-2026-78002.patch: rewind the replace() sizing pass
by the full failed partial-match length so the allocated buffer
matches what the copy pass writes, and add a regression test
debian/rules: make the new regression test executable before
running the testsuite