feat: implement CVE-2025-40300 (VMScape) and CVE-2024-45332 (BTI)

built from commit 6273344e62f9a56dc0dd834d1bd977c5af43a98d
 dated 2026-04-04 14:41:09 +0200
 by Stéphane Lesimple (speed47_github@speed47.net)

.github/workflows/expected_cve_count

@@ -1 +1 @@
-23
+26

.github/workflows/stale.yml

@@ -30,4 +30,4 @@ jobs:
           days-before-close: 7
           stale-issue-label: stale
           remove-stale-when-updated: true
-          debug-only: ${{ case(inputs.action == 'apply', false, true) }}
+          debug-only: ${{ case(inputs.action == 'dryrun', true, false) }}