Upgrade miniflux to 2.2.19 with native Dagger container.py build (second container migrated from Dockerfile). Add `ty` Python typechecker to prek hooks. Pin all mise.toml tool versions and track them as `type: mise` in service-versions.yaml. Refactor `alpine_runtime()` to support existing users via `create_user=False`.