Keryx Miner Supr v0.16.4 — compressed pool prompts, stratum+ssl

Recommended update for everyone mining on a pool.

• Fix: compressed private prompts from pools are now inflated. Since H14 an
  opened private prompt may be compressed. The solo (node) path already
  inflated it, but the pool path passed the compressed bytes to the model as
  text, or refused the request as invalid UTF-8. Pool and solo now share one
  decoder (output capped at 1 MiB). A stream that is cut short is served with
  the text it yields; a stream that cannot be inflated is served as its raw
  bytes. The traced answer keeps the prompt length the pool sends.

• New: stratum+ssl:// TLS pool connections (stratum+tls:// is accepted
  too). On suprnova use port 4405 in every region:

  -s stratum+ssl://krx.suprnova.cc:4405
  

  The pool certificate and host name are verified against public root
  certificates built into the miner, so no system OpenSSL is needed on HiveOS,
  mmpOS or SMOS. --pool-ca-file <pem> trusts an extra certificate authority
  for a private pool. Backup pools, reconnect and failover work over TLS.
  stratum+tcp:// works as before.

• Mining kernels, inference engines, H16 rules and model weights are unchanged
  from v0.16.3.

Tested with the release packages: on an RTX 5070 Ti, a live pool run over
stratum+ssl:// port 4405 (40 accepted, 0 rejected, one connection) and over
stratum+tcp:// (28 accepted, 0 rejected); on an RX 7900 XTX, live over
stratum+ssl:// (16 accepted, 0 rejected). On both cards a local test pool sent
a compressed private prompt, a plain prompt and a corrupt compressed prompt on
the mining connection: the compressed prompt was answered from its inflated
text, and mining continued without reconnecting or withdrawing the model.
Windows GPU execution was not tested.

Packages: Linux NVIDIA modern and legacy, Linux AMD, HiveOS, mmpOS, SMOS,
Windows NVIDIA and AMD, macOS arm64, and Docker
ocminersupr/keryx-miner-supr:0.16.4 (latest).

Licensing is unchanged from v0.16.3: original contributions use the Keryx
Miner Supr Source-Sharing License 1.0 (see the license
scope);
third-party licenses and earlier grants are preserved.