debian/patches/any/git-surplus-tls-accounting.diff: backport TLS surplus accounting from upstream. Closes: #964141.