Font files were excluded by fonts/*.ttf and fonts/*.otf in .gitignore, so GitHub Actions builds never had them and the container fell back to Courier. Commit the TTF (more compatible with PDFKit than the PS-converted OTF).
