c55a1de354
tls-client v1.15.1 declares go 1.24.1; every release back to v1.13.0 does the same, so the 1.23 floor cannot stay. Pure Go, so the CGO_ENABLED=0 static build and distroless image are unchanged.