Ransomware News Bot

This update has been sitting on my machine for a while because I simply forgot to push it. The silver lining: it got an unusually long real-world test run on my own instance before going public.

• Updated golang.org/x/{crypto,net,sys,text} and goquery
• Pinned Alpine from latest to 3.22 and added TARGETARCH for multi-arch builds
• Moved VOLUME after USER so ownership is preserved
• Switched HEALTHCHECK to pgrep since pidof isn't available in current Alpine
• Replaced deprecated mem_limit/cpus with deploy.resources

• Guarded the scheduler stop channel with sync.Once to prevent double-close panics
• Protected feedTypeMap and lastConfigTime under configMu
• Dropped the brittle worker-send timeout in the RSS parser
• Drain API response bodies so the HTTP connection can be reused
• Cache compiled regex patterns instead of recompiling per match
• Lazy-persist API/RSS status via a dirty flag to cut down on disk writes

• Honor Slack's Retry-After header on 429 responses
• Cap Slack messages at 50 blocks (the Block Kit limit)
• Deduplicate URL fields in the Slack ransomware formatter
• Truncate Discord titles and URLs to per-field limits, Unicode-safe
• Accept legacy discordapp.com webhooks; strip query and fragment in tokens

• Use a typed net.Error for retry classification
• Stricter ISO-2 country code validation (uppercase ASCII only)
• Validate field_order entries in the format config
• Warn when API key values still look like placeholders
• More time-format fallbacks when sorting RSS parsed items
• Trim whitespace and trailing slashes in RSS entry keys
• Preserve format defaults when merging overrides

• Fixed the RANSOMEWARELIVE typo in the config placeholder
• Added Todo.txt to .gitignore
• Log completion messages before closing the logger so they actually make it to the file