fix(site): glibc floor is 2.35, not 2.38 — read off the release

The published v0.1.0 binaries need less than the page claimed:
woc imports up to GLIBC_2.35, wovm up to GLIBC_2.34. The page said
2.38, which was measured on a dev workstation (glibc 2.39) before CI
existed — and understating support turns working platforms away.

- supported systems: glibc 2.35+, covering Ubuntu 22.04+, Debian 12+,
  Fedora 36+
- RHEL 9 (2.34) runs wovm but not woc: build elsewhere, copy the
  self-contained binary
- say plainly that the floor is set by the machine that BUILT the
  release, which is why CI pins ubuntu-22.04
- site-accept follows the new string

This is the pinned-runner decision paying off: 2.38 -> 2.35.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

docs/examples/site/install/view.wo

@@ -91,13 +91,15 @@ fn supported() -> Text {
       <h2 class="text-2xl font-bold mb-2">Supported systems</h2>
       <ul class="list-disc pl-6 leading-relaxed">
         <li class="mb-2"><b>Linux on x86-64</b> — the only target built today. There is no ARM, macOS or Windows build.</li>
-        <li class="mb-2"><b>glibc 2.38 or newer.</b> The binaries link the system C library dynamically and import symbols up to <code>GLIBC_2.38</code>. That covers Ubuntu 24.04+, Debian 13+, and Fedora 39+ — and rules out Ubuntu 22.04 (2.35), Debian 12 (2.36) and RHEL 9 (2.34).</li>
+        <li class="mb-2"><b>glibc 2.35 or newer.</b> The binaries link the system C library dynamically: <code>woc</code> imports symbols up to <code>GLIBC_2.35</code> and <code>wovm</code> up to <code>GLIBC_2.34</code>, read off the published v0.1.0 release. That covers Ubuntu 22.04+, Debian 12+ and Fedora 36+. On RHEL 9 (2.34) the runtime works but the compiler does not — build elsewhere and copy the binary over, which is the point of a self-contained executable.</li>
         <li class="mb-2"><b>Not musl.</b> Alpine needs a build against musl, which does not exist yet.</li>
         <li class="mb-2"><b>Nothing else.</b> No JVM, no Node, no Python, no package manager. The two binaries and libc are the whole dependency list.</li>
       </ul>
       <p class="leading-relaxed mt-4 text-gray-700">Check yours with
-      <code>ldd --version</code>. If it is older than 2.38, build from source
-      until a wider-compatibility release exists.</p>
+      <code>ldd --version</code>. If it is older than 2.35, build from source
+      until a wider-compatibility release exists. The floor is set by the
+      machine that BUILT the release, not by the language — the CI runner is
+      pinned to Ubuntu 22.04 to keep it this low.</p>
     </div>`;
 }
 

scripts/site-accept.sh

@@ -118,7 +118,7 @@ expect "packages index lists both"      "$(hit /packages)"   200 "/packages/serv
 expect "package detail shows its dep"   "$(hit /packages/view)" 200 "writeonce-view"
 expect "unknown package is a 404 page"  "$(hit /packages/nope)" 404 "No such package"
 expect "favicon is served as svg"       "$(hit /favicon.svg)" 200 "<svg"
-expect "install lists supported systems" "$(hit /install)"   200 "glibc 2.38 or newer"
+expect "install lists supported systems" "$(hit /install)"   200 "glibc 2.35 or newer"
 got="$(hit_bin /dl/writeonce-0.1.0-linux-amd64.tar.gz)"
 if [[ "$got" == 200\|application/gzip\|* && "${got##*|}" -gt 0 ]]; then
   ok "the release tarball downloads as gzip"