New TurnKey Ushahidi version (19.0)

Port to Debian 13 (Trixie).
Update Ushahidi Platform to the pinned official v6.0.17 release.
Add a supervised updater for official Ushahidi v6 stable patches.
Update Laravel from v8.83.27 to the official v8.83.29 stable tag, including the CVE-2024-52301 backport released in v8.83.28.
Retain the complete official Laravel 8.x Git repository and add a separate stable-tag updater with check, dry-run, atomic activation, automatic rollback, explicit recovery, ancestry verification, and fail-closed package-contract checks. Laravel 8 maintenance is best-effort and has no guaranteed coverage window.
Preserve the Apache, MariaDB, Redis queue, cron, and firstboot credential integration on PHP 7.4 from deb.sury.org. Debian packages remain preferred; this third-party, best-effort security source is the compatibility fallback.