read-only pull-mirrors of github.com/kerberos-io — insurance against upstream disappearance (vendor went dark mid-2026)