From c0465ca123827cbdc934e1374d0024b57dcbbd37 Mon Sep 17 00:00:00 2001
From: ColinBruce <colin.bruce@digital.justice.gov.uk>
Date: Thu, 15 Feb 2024 09:44:05 +0000
Subject: [PATCH 1/3] Fix: Update deployments to add securityContext block

The cluster was adding these to deploys and outputting
a warning that they should be explicitly set
---
 .../templates/deployment_metrics.yaml              |  7 +++++++
 .../templates/deployment_web.yaml                  | 14 ++++++++++++++
 .../templates/deployment_worker.yaml               |  7 +++++++
 3 files changed, 28 insertions(+)

diff --git a/helm_deploy/apply-for-legal-aid/templates/deployment_metrics.yaml b/helm_deploy/apply-for-legal-aid/templates/deployment_metrics.yaml
index d58884354c..4d6e8ddea9 100644
--- a/helm_deploy/apply-for-legal-aid/templates/deployment_metrics.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/deployment_metrics.yaml
@@ -51,3 +51,10 @@ spec:
             requests:
               cpu: 10m
               memory: 64Mi
+          securityContext:
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
+            seccompProfile:
+              type: RuntimeDefault
+            capabilities:
+              drop: [ "ALL" ]
diff --git a/helm_deploy/apply-for-legal-aid/templates/deployment_web.yaml b/helm_deploy/apply-for-legal-aid/templates/deployment_web.yaml
index ea522694a4..70b47d3c94 100644
--- a/helm_deploy/apply-for-legal-aid/templates/deployment_web.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/deployment_web.yaml
@@ -41,6 +41,13 @@ spec:
             requests:
               cpu: 10m
               memory: 1Gi
+          securityContext:
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
+            seccompProfile:
+              type: RuntimeDefault
+            capabilities:
+              drop: [ "ALL" ]
         - name: web
           image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}'
           imagePullPolicy: IfNotPresent
@@ -65,6 +72,13 @@ spec:
             preStop:
               exec:
                 command: [ "sh", "-c", "sleep 30" ] # Workaround for occasional lost requests - see https://github.com/puma/puma/blob/master/docs/kubernetes.md#running-puma-in-kubernetes
+          securityContext:
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
+            seccompProfile:
+              type: RuntimeDefault
+            capabilities:
+              drop: [ "ALL" ]
           resources:
             limits:
               cpu: 1000m
diff --git a/helm_deploy/apply-for-legal-aid/templates/deployment_worker.yaml b/helm_deploy/apply-for-legal-aid/templates/deployment_worker.yaml
index 9894a5f8f9..e892d8cbb1 100644
--- a/helm_deploy/apply-for-legal-aid/templates/deployment_worker.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/deployment_worker.yaml
@@ -31,6 +31,13 @@ spec:
           imagePullPolicy: IfNotPresent
           command: ['bundle', 'exec', 'sidekiq']
 {{ include "apply-for-legal-aid.envs" . | nindent 10 }}
+          securityContext:
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
+            seccompProfile:
+              type: RuntimeDefault
+            capabilities:
+              drop: [ "ALL" ]
           resources:
             limits:
               cpu: 500m

From 32a78430d74d9069713cc0887e3780f5aa48be16 Mon Sep 17 00:00:00 2001
From: ColinBruce <colin.bruce@digital.justice.gov.uk>
Date: Thu, 15 Feb 2024 09:44:42 +0000
Subject: [PATCH 2/3] Fix: Update cronjobs to add securityContext block

The cluster was adding these to deploys and outputting
a warning that they should be explicitly set
---
 .../templates/cronjob-admin-report.yaml                    | 7 +++++++
 .../templates/cronjob-deliver-scheduled-mail.yaml          | 7 +++++++
 .../templates/cronjob-destroy-purgeable.yaml               | 7 +++++++
 .../templates/cronjob-export-digest.yaml                   | 7 +++++++
 .../templates/cronjob-extract-digest.yaml                  | 7 +++++++
 .../templates/cronjob-mark-purgeable.yaml                  | 7 +++++++
 .../apply-for-legal-aid/templates/cronjob-metrics.yaml     | 7 +++++++
 .../templates/cronjob-reset-dashboard-overnight.yaml       | 7 +++++++
 8 files changed, 56 insertions(+)

diff --git a/helm_deploy/apply-for-legal-aid/templates/cronjob-admin-report.yaml b/helm_deploy/apply-for-legal-aid/templates/cronjob-admin-report.yaml
index c4cfdb3601..2b0a96f516 100644
--- a/helm_deploy/apply-for-legal-aid/templates/cronjob-admin-report.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/cronjob-admin-report.yaml
@@ -34,4 +34,11 @@ spec:
               requests:
                 cpu: 100m
                 memory: 1024Mi
+            securityContext:
+              runAsNonRoot: true
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              capabilities:
+                drop: [ "ALL" ]
           restartPolicy: Never
diff --git a/helm_deploy/apply-for-legal-aid/templates/cronjob-deliver-scheduled-mail.yaml b/helm_deploy/apply-for-legal-aid/templates/cronjob-deliver-scheduled-mail.yaml
index 54f3f499b0..1516497a7b 100644
--- a/helm_deploy/apply-for-legal-aid/templates/cronjob-deliver-scheduled-mail.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/cronjob-deliver-scheduled-mail.yaml
@@ -31,4 +31,11 @@ spec:
               requests:
                 cpu: 100m
                 memory: 128Mi
+            securityContext:
+              runAsNonRoot: true
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              capabilities:
+                drop: [ "ALL" ]
           restartPolicy: Never
diff --git a/helm_deploy/apply-for-legal-aid/templates/cronjob-destroy-purgeable.yaml b/helm_deploy/apply-for-legal-aid/templates/cronjob-destroy-purgeable.yaml
index 0db917b62f..55743030ec 100644
--- a/helm_deploy/apply-for-legal-aid/templates/cronjob-destroy-purgeable.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/cronjob-destroy-purgeable.yaml
@@ -34,4 +34,11 @@ spec:
               requests:
                 cpu: 100m
                 memory: 256Mi
+            securityContext:
+              runAsNonRoot: true
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              capabilities:
+                drop: [ "ALL" ]
           restartPolicy: Never
diff --git a/helm_deploy/apply-for-legal-aid/templates/cronjob-export-digest.yaml b/helm_deploy/apply-for-legal-aid/templates/cronjob-export-digest.yaml
index aae136b891..f1aff2142a 100644
--- a/helm_deploy/apply-for-legal-aid/templates/cronjob-export-digest.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/cronjob-export-digest.yaml
@@ -34,4 +34,11 @@ spec:
               requests:
                 cpu: 400m
                 memory: 4096Mi
+            securityContext:
+              runAsNonRoot: true
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              capabilities:
+                drop: [ "ALL" ]
           restartPolicy: Never
diff --git a/helm_deploy/apply-for-legal-aid/templates/cronjob-extract-digest.yaml b/helm_deploy/apply-for-legal-aid/templates/cronjob-extract-digest.yaml
index 073b9604a9..df97fc1bb5 100644
--- a/helm_deploy/apply-for-legal-aid/templates/cronjob-extract-digest.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/cronjob-extract-digest.yaml
@@ -34,4 +34,11 @@ spec:
               requests:
                 cpu: 100m
                 memory: 256Mi
+            securityContext:
+              runAsNonRoot: true
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              capabilities:
+                drop: [ "ALL" ]
           restartPolicy: Never
diff --git a/helm_deploy/apply-for-legal-aid/templates/cronjob-mark-purgeable.yaml b/helm_deploy/apply-for-legal-aid/templates/cronjob-mark-purgeable.yaml
index c827ed6c1f..5cb1ce6068 100644
--- a/helm_deploy/apply-for-legal-aid/templates/cronjob-mark-purgeable.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/cronjob-mark-purgeable.yaml
@@ -34,4 +34,11 @@ spec:
               requests:
                 cpu: 100m
                 memory: 256Mi
+            securityContext:
+              runAsNonRoot: true
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              capabilities:
+                drop: [ "ALL" ]
           restartPolicy: Never
diff --git a/helm_deploy/apply-for-legal-aid/templates/cronjob-metrics.yaml b/helm_deploy/apply-for-legal-aid/templates/cronjob-metrics.yaml
index 8a96330075..656b363858 100644
--- a/helm_deploy/apply-for-legal-aid/templates/cronjob-metrics.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/cronjob-metrics.yaml
@@ -32,4 +32,11 @@ spec:
               requests:
                 cpu: 100m
                 memory: 128Mi
+            securityContext:
+              runAsNonRoot: true
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              capabilities:
+                drop: [ "ALL" ]
           restartPolicy: Never
diff --git a/helm_deploy/apply-for-legal-aid/templates/cronjob-reset-dashboard-overnight.yaml b/helm_deploy/apply-for-legal-aid/templates/cronjob-reset-dashboard-overnight.yaml
index 6d015b80b5..a7cdd83a8c 100644
--- a/helm_deploy/apply-for-legal-aid/templates/cronjob-reset-dashboard-overnight.yaml
+++ b/helm_deploy/apply-for-legal-aid/templates/cronjob-reset-dashboard-overnight.yaml
@@ -31,4 +31,11 @@ spec:
               requests:
                 cpu: 100m
                 memory: 128Mi
+            securityContext:
+              runAsNonRoot: true
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              capabilities:
+                drop: [ "ALL" ]
           restartPolicy: Never

From ab0776df085510a0282bade3f4dc6a85fa48ab9b Mon Sep 17 00:00:00 2001
From: ColinBruce <colin.bruce@digital.justice.gov.uk>
Date: Thu, 15 Feb 2024 09:45:45 +0000
Subject: [PATCH 3/3] Fix: Update Helm chart values to add securityContext
 block

The cluster was adding these to deploys and outputting
a warning that they should be explicitly set

These are pushed through to the postgres and redis
pods created via Chart.yaml
---
 .../apply-for-legal-aid/values-uat.yaml       | Bin 12399 -> 12786 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/helm_deploy/apply-for-legal-aid/values-uat.yaml b/helm_deploy/apply-for-legal-aid/values-uat.yaml
index 8a7538c521d7b75d49b2131f4a1f4e4dc05558fe..798dd5e0305072a9f175951bb289783a446fa03b 100644
GIT binary patch
literal 12786
zcmV<OF%8ZDM@dveQdv+`03#Na9-=QOmc=R~ICwE`jV<juKA}Z+RPrj~81GK#8ajE*
z_;)a;OKAy>-9)|`WqPZE!BRu#Q<Oa#dC&(oxiV~h2Sow{3m-!HgqlY%mdWpbIhule
z<#0yW-bCd%Lg1R7UZ-BHMXXP>_(iksLbnU|tDXg3435LF(p}oDz=36G^4BnkOIa{~
z?*EWQl(2$PZhd@-2SeF|g%+Z1U|OBhpoDo3ok4TR!5*0bu@rV0uMb@gK1GbiY=-OT
zV4`3{@k@Rzk2H8P#orD8-83g4?;EYjRVGMsc(-(BP2yC?5G8cu1!MV%f^g~wwjPh3
z5d3CMW)=4L7~~yKVBjrnHxFPSWQwi=E{UgKF+ti*(0x7@y>s?ft?w*;+&#TAbvbGM
zq3Pgo#sTpC``=X4Zn&#xP0&~rwtU9?CMm{aGT>7puzpJ^N>`r%&=GJl?5i|44DzN9
zz^^YXy4fRZqDNq}Jo_GuY{5hS67af6E42#i^TB<)bESi<;1e%?5Vo^xe~VNe)@uTC
zrWx9cR%kU~x&+q>q-AJ%%bMIM>vl3T!e#?QUX9(UY{V}+l^};=(8J|gZCEcJl}o;g
z+zNavhnXH*aZ7)f9-7b-ZZ^-kZ(c??ZVL2glIQhcM=L`Xr&?Ui{>SwMV23_^G{kqp
z%w%rLqG6|0p@c*85i@;E#BZEyWDDVVWpqLKp`S9Npvgks<jWd_4%?#oA*1BE)lm-r
z!lWa<ScNSpUPnF5cX(T!QekD8Lg{^7moBDkw2J&>5CQ=pC$OJj^=j<i>fh^&qZP^l
z$_Z?Ce1YBf)_zyj^+UIrY49m;T8_*)ts)_@<a1z@VSDhwpMRW|pfSwC(rz;WGE#wc
zLY;;S_{TEaiR;IdP2$_aU7Fur_7V3$qEDQI^LNVOrG&v^eGtS!+De*Rp+fGba63(d
zsgLO*p{u8ACg<;a`BEfQC|Q6o4DYJh4nX}eE9&X0a&7XSc~&#v@ul*7C;i}|?nRLJ
z)$JBUDAG%wiwByci5iL!6$g|nv4P8TF7v)&!I(Wz68dU^9lu25t)5sMD<3z6j(e<L
zNljP^+YpeajdYs7%UWS;CyeaqNb#DCY<C5%JXZ*!+nH3Lk6zhGDprc6tL12b()M#=
z)h3i+LuNDm_lxr{D20<cED;{Ym<w8VMJz0^-*0e@p^1+py<ijp8}=M^qg=|_X}33>
zv#DAut0V~{etDa0v^tCp3H_;V_O6#I$_eYd-e)Nm#wDczN1ub12=-%7MF?wPRM74%
z1*=7fLN#SW>*XBp&RSfpj2(UPoc1LFfAu0~y^^xj4G^pw=V>zdV&O?o=HD<YIw7??
z=6Y=9r1r#<AC0%u)YErsXLaqo?XOC%Q)=jXUl)5ieh4-KT27W8r?f^v>1FrY-Dkl<
zloUlI?k=lutQdExIpeU187tgRR2)Y`o*vhR0aHhdvK$kKhm|-(ei5XNc$QFAdv<S|
zMB%xkbtZnrJ&R$HF|88i%q6Zt(|$UuJkdBVk?=oF9woY}1A#JAfO~;>BxVvI7%Yf7
z!tX^lU_lzxh>hRbc*bM&S`Y0Igq*z9@_2cmL--}XA)BnEF^i-30~UJyQDs^W)@;y7
zh`1qxY)WcHtRkV?2VdsbKZZVr_|Vuv1rVba;*R1nkCkPArQw_UU6nAD*!zR<MG+D@
zq|hI+hcD=~bjqLmPKg;V9s0CVz4|c&h%!k8nmAZSi6wFVBtz+P>wnh^?4*H{o>f-E
zS$7of0m=XHz_Ci><_#_pZ@@=e?4G(ho$`ooSs+QZ*Y2u*m~W}CpKT%--(lRU@`*@!
z6ttd76Ai8Ang}Fc+oJlE#Mzr1E)TWC!vBapUd4)L52OBpnf}vAg9@sUM>HRn4tL7a
zHXZFV-K^Z2dy#d#f!0QOaqWtnR|z|zAi>(TVs6kLuWNlb=S^jnb`9p_VZtevP_}!V
zN*!P2Jh(58RCL^YLb}#PvYI$nUFw`W?Z|OuIWrG={6d(RN#yN)Q*oaJG}Ebt?ewW}
z?G&@fq*E4+BxurKGkbZfYij53UjV8fT0Gi*ImEG$7*LY1(0w_NhZzz0`QYhZg`<pk
z{~39;ju?&$FgfL9(XILwCb-ku5ra}SC;PN?vbnkyAv(M?n#fizKbW9+MomIB<izIN
zN9YHr3vrh0{RH!Y$*-5hm<p+KYnGzdXE&P&N{+YmtN77h+@(h8KO9#jlu*RS*J|j_
z|14p-o>2BXdeXb|0H@sV19M+N4lO%;sV1FQ7q7hyqYOx{UDtFaDf`_2i}KvS9{R`N
zO1}Cqp*z%~N4+s(3OPz$S^cGlg5rMkpo3t-w=|4?EbQB?GxR)1b3Yk|on?v9c1DJ<
zA&Ix%EtbV1kDd;l4WCyCC*j?raq!}pk}JL;pysUJ!|i2BuB2ONV%xD&=CPVSO`e!r
z2$2=o(u-H(3@lxX`V;d35ou^tIg!JKE$Uls{ujd%I2`(F@(q@+QuPf6iLuoqeoaY5
zjIx2+Zll-+RqjYp<}<w!?5_7Q#Tz!^_LXlG$4aCMcw4K)yJ21j634lOsv6ngX3s$v
zB+haY)rHtap{EKYJ?;Q_>ZT=vb}c|Fj_^V!GwH@-DN&Q7iWEA37TFIC9rBnMk@aMl
zjwviWj6EV>POC7y{%g?%$bRfC@M=9Cq9pAb(ziYMdhU0DIRw;LFV}?7*vZ2IgWE{l
zenaCwXLQGxrzd;RDrU0ro$rh7keU3)CSx|SBd{)sSPN0DZQG^LmYE!3OFPC|U{c7d
z#R$kI*4KkvyH>++vmk>J7<<a^4EK*|86l#Ka1*RAXlciPN<BUrQfQw+C6DaBPc)|D
zx%6n@C_yeg(#<FpPjJ00cSz5u*9t*p@B`%ORP#&m=HoFz{uerYI}nF&y9Mv9JCIfm
zZy@iCLq~%h6>C1+#HZK((7s&{C~=@z7YN0#igsyj;A^3^XC>ueQh?~c(WIw+{VECt
zJ7vVYqSz8HTAZ2goRSZU@xmt?1l6!+Yc1NV&2(5rZYk$pxd53>mF`{J*znM=M@W65
z$bO<+qPFRQALmf{>`GVsBjj))?9v@@o$0zo25o09{w@Px?^W^L;$v_%gqS8RZ{ZMX
z;OQY|guwy4cr)l2FwQr(mnH!9Xurp5Sd`%1I$-!fb1-y!iDoOo7M<179ENzJen{~f
z-b-sw@5DUf2%Ei#cI#0{)D?UFOOO&@03{fq9^=uo_{HGPJZ|&|#I&VzQo_fYJDL-B
zz)V1Ik1`|p@=fkiR^Eogyv<*_fy>aw2*mbP!9PejER^2-deWy@PM;I$+x=?m9#gTP
z{47+-HOB*)tDU^B52?`EWLS3rJN|WKX;F-IkX<!yGBpP>ZQcbHf!lDkJTLS-Il`I<
z-TJd|2P6|#MWO2+&<`;TOHpadPN^B7{6QSMoEoE?B}bLsTZfaA8MqG(?O$0&0p^p)
zU`^V;kRHi;Sw=aXKfIj8?Cq5J#<Pb85QdA~eK|3j9=)RS9y6~6MOe!Ffn*!F@*&bd
zDqA3<#Ss(fXI#t@4c#i6Rx@Lw!<eSiG5=<+AO_6TAHs-<U~vf^+_nEqwwR9pU~??l
zyxWV1XgKo3qgqf$DVQ_?ZKudAWF-~jx{yX-AQ~Rpu>CcM9%7Ww>XsU_O#W>Gl%4nS
z$2#B^*TJ=%TU$sJN6)E#^7$c0Vn}-Ptjpqf!#ZM;u58xo;o(^BXHv6tF8nmB8k&?P
zP?t*})v^ZHA+wx(e}m^Q0%fllykbm!qVc59q05PUVxC~@_eyW-WMxBYToy*$V!BmZ
zmoSc)l56OMPf{0up$;UN%w{`J_;kw)gg)tHKZJvX*#({MuBUy_dY>FwO-rJW4TTyZ
zi=4&Bl|dpI``0fKpL;wbwx&KUOR+7(P<<&^mIJtmj<M8ltP|F@d(;Kq3rRtMHM1Mf
zU9P~?9y1&&3qlGAX6M{X)ffk7f{{Walq+PPy$raOY`DwOPmVVvwCPh}t&oEp2f!`n
zUJ&Q_`j*(Pw)vDm5Ycm>-g?hR72I2l{Z&{K17lzK;bQzev73fA#yTi3T!b2Yk*5w~
zy~{jI&hL2iYRC_T=kOh$C(=w1Ybp_@y@>evTA96f<^88%VaKN>VckuGe@0ZA=znLc
z3nyoPf{8=M{vmRUU;wPgvFTGlf9&r_bAZ`XazAvyi?aYMh5z+m+p50W*wO@HeFSvf
z8s-lP^%JspgJczkkby}^4w+tAB`AMaA<miEn0prm9$?k2PY9~>AH3!4m7<jS+GW&F
zVBsP@<Hdccj+&3Gn+W;lT1@Tu!C&N<k63VNUe78)6!oPytPmO#o9JQKbxk*5rB<d?
z)7Mj5^Mpl~1<va12at7_h{2c&(V03##CQY{tA!Ofdr6NOz8HsqWX3614W6&*NHkkC
zyT%FH3R%Ijppm2!W>u1J637f0x^NYpkSOLBu49_D^O6DevEi*C1mOXl3f<p}Lj)Za
zeZcaMh(DAc=sKTqVu3gq@Mt#2zJ6)wz>Fq9GODK&Izl^aHtsghiWyS31XhvJC&jgD
z2I@~mgc@m{%sp>F$UPNUw#xe{H_4<pP6#EIUo3f$c^&Pw+E=JmC+$}t_^uyV>I?F6
z#(Y66Ez<uTt3eG016d-ms8vpp1o}BQ1a=Rn{5QUG7jF<7R+|5WTX<ZlOO+@8@1V@T
z?3s>)=@s%Odb8!Sb$+d%K{2NorWVJq;-f3k5J>Lr%F_9cua{*8c)m%0e&^0>(ifAy
z#qjYbTt5Y12PA9~iZ&p4rmC*Gwi-90Y<QvWm;(EjMYs!=@`Qqx>}KSxPGIX3>$J~&
zCI<(*b7f(ZTK3%O3*|6Pi#M2a58vI7ZO2p-Q&dOZj@3zf&>fLQ^L%;EmXdD2j*jqA
zc06qym6#h>TxswnE&fxvt&^*WBwt)ewhDwt9<)S&c`4~K!C5zuN5fNR38;^Zd!SS(
zmUvM#aR>a>x7Z$v0jnB3(P~5zuoy>XlXQ23Ejk2*v_A5in)rr8_AI40+5C#m|1MJc
z3<&GsLSp>KRmik3T0;`o^iC*=Q9nQYM&(fqD>9}z=WZzZ<hL83#xqfubg4}~E(`3r
zrYPHyYk3BgA`b!37tR0bLIih4z~hoB!LXu1IEHMhSB+YtMKxcR&kY&#0qK@k$G9EY
zU*JcZo40$pc_4e80PZ95ZByBO-AL~a4+XYs!dK}xtv+x>yY}s2k@0X;0NE0PmsSci
z3@(*+Mh-zkxo3B{Y_fBD65I1$Hw1g~b|s85Uj|I$oY|gA(R)N)B&wn_6`xRV$JM4Z
zK{_uV9toB{yI-nj$kIY1lQ)d&TF){GV1plY_EcF~#6+pSopZ!j0lW<RU8+@hFwkgv
z<SJRHlF{t!35A;)V#YBjmJ!a&lje|ShdLDRn(Cwv=y?s>1(MHf#h|8WpQP#!B8OVh
zVW923jO=dFF-oW^)v$5RUl+15J_Ui9maIDGF1MR}YU7R%D610Rip#9?e<aNrZO;@m
z8h?qev{p-38$~sd@u4Xtvh*6srohnX=sV_1fFnavJoO<2INh-R`f3U|ijSO<Snh%Z
zY72kv{l4G57f&bP5n8F6YXolhm!1g6xq1cLqVGcolJy73Dga!q6iWD7w?ghRF?Xs_
z)+85A9))F+NVr0DShE>?;qfM6UCPTnu>1gsWr`3ejH(T3__F?>?z)w$=NzQepDJHf
zivljCT3P95f3Ev|ArH`ch{B1N#QBme!9fwoM_}9n<BzJ04?h$C?jXDRMytR#K!?X8
zC!CZ_?peomN{f)cG^$a}z5_|ag+}qPj|S8H^3=r5&!)Th3B6HpSK(<e(anOaz?S>d
zZG43-7OV1^a}oc+Z13kqCZI+x%3*}w$#9Vuo&4H$;T3?&*&^%gFK|mCnU)6!REXOF
zO5^3QKIw+oDXipQ#7Vjb$tCAfCZ%xGHp9<8JgS>&*N{1GoJptQVw64>&a}wn{<05D
z4{r1@(If~+r(NQYFR=-*Nm9CbGs0o`!n<)sC2_f%a3%}W+ak->mE%;YLdRkCWdmc6
zQdE%6$i|_o73ce(tarT?O_$*Renk3W62$4pBeDQYbnI&(?X8I@^=U`D%(@#$CCbCy
z8pq4gt|;fPCIX)l1nr16IOvfVh7vUNdYz*6aCbJuMktqqPmHn(Z#<RvS8-D3<Ch4O
zqBCle4p>ExQB;wGL^1vd)2N(**#mKbzK>4BFj@dY<ZQ*QRj3`w${|&Y!@3r2J&V*0
zH$~$8CJ2m<C@f=0)IXiWIE5kCkld&aK<`Go06x1Ovs4X(BK8{tbdb-62S(yi#hu^D
z#CIV+4j_B{PUQgUe@enxcT^3VWWY${*KY!CBX$MU6HB$`Y^b}F$Ji?JC!GwtUGu|T
zPIi9ty&%981>Iy4pID#!B5l*cU>zG}g5mKT2Z%>3xmx?o1&$~L-4e2n3%d2U;X+e&
z{Ns3M6i_VDS&j6;vIcbWDFmfF-F`HTIOUs|XC6=2vs_~3NhTvnTG~d5^*dSBr1m1i
z+e-mKgcb;dPL=A$h2J&auJsQNQc98|obzqnj@}<3y4h^ZVDLT^f&vhzDRwougTGel
zxNt48f5~j|y-KQNzyy+$oekC+GS320z7fc-m$+?5&4r4N1&x_B_=*pr{;`T>rx<>Z
zMa#5CbmQ{P2ciHGK<%59kaqkiVCov{q3godpJB<rb7^F$le{ne7SCHTk=4sRLKb&(
z<PPRqZWGQ9_jy=WGyLykGo4-WUO>JbDZh);0WT9ixscMPhS5!yNa`EZx94F<?9>NX
zuK&53aZGeGX64OJkG|XUCq`tmToVtdvMAZ3M^OBo;s{`4z?4bt-hXeC{?CeBX+>Sn
z!rEgYkf2WJfDqTsNgj(rMy66Dc8R_9|IJHq;5gOYoD)tZ{8)|R=CjkA(r84AA$5}H
z;<FjNqb&)DPaT5;G9Q6=T<q5#HV+H3E+BfK2Y%X85L38oc>ACPy8*(jD}cM3Yf^^!
zif`r=Bw?@&0vJjN{TX{{+Hk&}v&_|on%At^vi9V@)+iIv=qOnCyebFiOw3#&?WjI-
z7t;Yn$Cc6|#kv^sdGUv=V?hf=&|e5;bTid|wCX<(9ju3R`maHoRA2R&G15%!LJ`ft
zUXb^&`Y2@8rdm*eoSeV}-dtb>L5a8(HBz*ad9B!^)gn<aqu5j-TrRABdUKm2^g%50
zz1az*_fPDLA0>(KhRh#NUNCNx_Gw8x8+=V^;U0c6M8anW$kP1`?A?$OVvN{~P4&Gy
z`ElWt_}#)tko(ASzp?037IaGgNcs^pr;~8yqkylLIv>11*ztD+n2-Acp0l<J$H^qT
z$j9N@@M>pwjtR<P8E|fYfjDd*pHr<HEOXfEzMY9H9aW|hnxT?JzRn7b3M#qvqGN(x
z6`o8wdb9@B7q@#wK;g6lqw8W#@rI!?bD3y4_{N<siQZGQ3@;DT0<c3c0%kL7v<ub&
zI#R6Q<Lh#371A4)HrX+AP$@#|(6$Ntsx@pMCQ_bxhvSJpgwiw=!$LsJKMq8{i%uJh
z?;a8VGx9xK%l0^>gYd-~q?=iGvMllXz8xR(5UFYth7B=5kcqlDx~~n(1KGCNVnd62
z`Duh0`z_1vKK8a;_D#k&zSUjNQ&}|uHm^j*UKC{|TKV_0(v`>Ta`W`Kj*?y4{9p<v
z#2WZZ$~xYXGNci@oG*B_m7!RKAsAD7fd7CbrI)!bHBHx9vHNI2bP1HiXSgoaA-p1}
zbpvwC#}lVdubBZ<l;P5z6E%>5)7d7ie0S#o3Hr>X%EFW~xZXY8OsV_uw9ftj!e1$e
z^hCE8?_jxC?vbKDI@k$-gQvWrZFMGM=mH@<pE(c!)%necg*YyfX)30tZQPP;^QpyA
zDcaZI+vnQLaP5$E9IQsH`^N!L!fY-~?ws>0pT@>X2me{7a-V_og_bq}35a1S^qg-g
ze*>RiKH#SMjOwis3F<U3<wG0aWP`68VXUk>9dXb=uEzWz>abRCa0B2F#lUT~$XHX5
z?)T;9VnMHeCH7{jhz#PXYH)YpTRtcRK7kBP*Vj()Huuc`o=iFsQLzR@WT-C=5O7Fk
zw&FVG=R2Eppswx_A>6c3EHyfEuak@Ik!v>s+|kwVgs@D=9l#ojvTd;-yJu;dSvzb-
zZFnroy5C~!`l|;h<6pG=RT#P<qofJN@72K5ud(iuL;Q8RNT{m#me_F=PAgm24<&IT
zB&4w@1=jXo#R`e6VSy=}z=4J)2E&yb($6dC_a$LI?C*cuQClCx{O)^^lM_K++ZAF^
zqHd>7VanuNVpshlWy3JzQ__se7b0Vnzzxt!7cm$rmr{n~-%P{x$zv5G1!@SRwmx}e
z63L>>kM^*OBHhI7ll2cQj14qv%Lt$ykC?CirM6!veiwKqE)nD77>P(Eyjkxybzq|}
z&fRN{xXP=P4|O|)?iZsO*3E-~5CN+<O~kE%C?5JwRVzhnDGlfvPNu6M0qZSGQf1_r
z=6_N1l$}k>pJhlcR+|7W31XR?6r(X~=j6n3Yg7~AF{Qvn5oGfZNiQU<<CI4U!u79^
z^1jUe=JB9NdgNGc&_qN(v8?fdOE=_a9NDW6$sxH`^V#G4wgC)4dcHbHou6xnuVT7$
z6%LE2*r_(Mn!beHN?!D82`37=9O&oIb`$S*MeBdzqVVsEsv>k7#J7SREh~$8ZHEQq
z*LmDB7X7^+_8xAsFx@$$1UNSHa+&BgX?=l$n{2UNlXKP3$gz-nOj%CtJWoFMOoB$i
zOtV<qT~H+P$}q<NJ;%3z(u1KLFh}y^9BZJ`;_r9+*~-{VWj8jU86M;k^r+f~dLv$J
zn6es<$L(tRn7H^<$RMp{r9>ZlnMa5~q{5}u)x#L{-iuh8@mZF9i4-)R>i*Pu(X4fW
ziO3g0p36&~jMyqRR?6t(`2iR*-P624fmcNUJ^e&N6Pp-%>ZR!N^Ay-zLSLojQF-pH
zU*IkKt1y0!B{@q?B7hmpb^65l^ReCdVlLk3Hr&d_LEBw*E{B%R!*n}gU+oMfys)xx
zA2fvmQaKci2|Ii+thH_|fZ{B5Rf+@b4~<mVYVH(5n^gmr03hXW2x;~!04#N7r4cb;
z>ldgaW*|d3QtGA<VF%*5LM|@ks`5(#_0=Kwfu%Sci%MQl1*Pq?S6><pp>vC)hdXqc
z^BPGFx!xi=b59iHYG-8U^Cog|IUh~?TIl0zcw&UhCq5He5fBI<c-nW3T%0k7ln<-V
zigc5*A&+%Apvtwego3_@trCwTl!#dT!RHzmb+`?fwsgQq?!LQvJ?M#-S~LJqo%;>|
z?I0SMYHV3c?NJWrtX3en7w-I%Cinl24SRF%hRj~DJPK_0it@rl9Jp=F7p3#I1Rg?9
zlWL=j{;*-37@b|~4L$cEt6zTINC9%9p$pf&nd=+zxe<d2G!d%#3x<vtop-}HCHGu4
zT~iIs8}hd#!<yfNor)~Azi0Ih|IZ-#h|349OUGxuc$iF*v@~ioTfgiEV$3fK*{W`R
zdOEx|9{?MLI1OUK3Uoik!We^zKQG=qMn1{=MeiUX7C3R#5VgnGY1kjNf@v{%3V5Xn
z{H%RzFy^Y<%1O^ggi*B{lP~Yf<skN#b*Iw|89rvA;jC+3dMHc87T^<UTh7Nz&qBeB
zl^lf}SWBBF4CD<VaGu}{n%!h@m!Cou5?KVG*@Ep8_+tJY;hUG{ME`fF`UE8Uhie|M
zGpJRP;5$sqUP@Zj9X*1!RCHFp&ipCr+e)v4`ctK6wc6!Dlog)x{?(-OnCHU%p(&m!
z)>L0yWrz@CXCyaozawmAi|UW@S)mW5v*+mQdaVJq!oAINHNt}~3!t7y7R|qt(6o@~
zXE+?n9rgORtfZ_!5_0ulhhEcC0x6$ap!Jf-S*iKj7jqXe&nrx6T^~y)xhx_bJg?#X
z0GdKl2d*x#4-yEPEYRMEMOLvFe?|%@<^Vx;8}wRh)PSsQ-{|oMeEofz;wrX)Ej;QR
zhPv{qyrJP#(nm0zk2ZM}`e6Ph`);6<eRw=_b(R2aMgymSnWhXDpB;==0+W0%)U&HM
zfx$B!lxF8}9uZ9XI3hq}uS9*?sqGP$#r`8MywHjGm6u*xV~rM?J-nJ=AF$sXY9seU
zxXq{Qygb$xN=M;E_@{01bKAWO`lAUV(5r=n%~S;`GR0YZgP~G~*hnmTpIH6ib5*HK
z5rS?AykxB*BAMjQw9#7u(MuYT1Kv%?ON`6DD1bDho4`Ci-lBo{n#59;Jg-=20ql)m
zI+QDg-D}(WbjKoi*_JI*3}5UAW>-CV#i6hjrFr4H?-Z|hk07GI5}783=@@lKJs{TY
z=`!6VB3!%bg@9fg0@z$5GqL4y{AIu%u)}^!+`{*`vF`mmrmtI>4`>f!mF9QJT~<sL
zGGR7GQz4bI4+6jqjy|Y)dmYw6MX|!H<5s`AA^!k7diS^zlj0aSnU+&o9az=EVzKu>
zbGn1W&EYekt5dG|P+iXllQ^g66F0DZ%4MzVkEtT>{q0u}2z4vuT5@+-eO`}@5iP<j
z>8rr(@N=#$NCGW1+M@WHBGzHLh)Wuu>B0N|uf^~5tAj6thJByIumDG~6Yj~pkqWO~
zcv4KVW>tWyLi_2=@7%`7Kg5**RY$;}qs}X-3zP06j~FAu%Tyv+&_39BURNw*Gql+S
z=G>M^ht}~^skKWAAe?(`JE$m(*{$H{0yAz#91xP7{OjWQbI0qO|AOyHh^y2yD?2oM
zEuC5t7?wUHN1G_P6`K_sUh%~;KU?zKx^Yk}VX!IP$sG`vXgd>4^LzzWdt|<tsJba7
zz`||8g<A7At_C$H(a?B#N!ul>Hqzi&)JceE(?a>U^77>{2%Cp_H2vC{z`4`t{!h5b
znlY^&o{tzbx}nZ1f#Ri;UW!>#_lAWMOM5b#J}?~{gkp;Ja05&<2RXZamDY%X8dDZf
zMaL1gj$npr8n>wIr9%upK7E&tGO5Q>Btm_7e8*752V5ID*jc3>OuZ1+UQxrzm(245
z4j?=IWgII!e<ZMSK?_N<Yv#7h)`F#|ytD%NL(MA9rE$)_p6a+^_3Ls)St(ATk35p1
zY}HJ@P~Q750)Cxgs*4!WnJyhb2adLBW4H1W9!2p`Uv@@2I5RHb%e}%QGO>Rb<4hrX
zxH+R7A{S&a`ypL~!A3d43?00qQql0|;4Bu-(bE3K-AmyQbg)>q0ipEHrzytphUT8e
z2jmgUF#iS;$xViqa?~nsRGgIVXwZ}_v*E17|3msaVubB2Nvu*d%6OG>%VuKdHaGoR
zG;a93$m2l6y;CxTTC{&E^$kNr{2BI4B7Xc9MkA<Lu>(Xd%3;@gE?$2$N4!?3-_4E4
zc85}k)w(%ahT~#QAfD5w9RKD<TNay>u8u1bwpYNz>Uub&!XO?G-}@FV@=RH{g8&!J
zI9A9HvfXQ<qykJc&y~Kd)&z=*o@Q0Hh1p+v+{D@Fwcj(*Uw)yFd^ox|ppgXb-)Mv8
zR+q9{m(6}S1wDz+pBjnD?^yG$b}I}3-Vryf@OC4T)x#!4QKp?NQ}qOfU_X3V80Zz9
zx2Gcc2M|<>kfy-=Ao6|dPx#|pBFP5|!$7iO(pY^pI6#T+@&fVcXgk~@M6}5YSUW3|
zUR=+Ul8~*y0v_oz_g>fFE>&C67Y1>?5(;OSw}vQSl%MWnw?m#1FdFvE$9WE5nYhFv
zHXUb!1`M1|&<VNEMswx<;U~?9Wy&!Di}Io%R4}}&JZ&<cEAgqCBf=yf-nNG&h|TRn
zQ4P1D;!YvQi7Z$A!ZzR|Im~rVwunsO(7>K;PC5HqElh@N9<#78=4x7@yz`nz+2(XK
z(^k=xPlrnr#^4M@sDB0G5ExK1zq)m=!Zovnr~|{6g;yMA&)xN$Qwxtx%;xgqK;g;g
z$f`G+oJK<A<6}}3O{8jE-VE;k07$Gln>m!v-<!M*v*(^1in|>N@7v9<a@VPAT<a-M
zB1*yCUe8OVlG7GI_skAF!J1B@Oz_UfsMCTyt)ztxLv<20$`A2>5jQfgEW<$HspnFQ
zW3g8+GV6o1a*NuBjGSh`+TO$q#SO6|yl7^LKYoO%eo)Z~T+J&)-oI5WAP7!m=!8KV
zjOB3^-NUIQzC^jxlLy0hB2F{bc%-D-YxS6`k4v?D^oNjws4Gj2fSN&C%=-VeU$zQe
z-!Jv}joJcvevbk%8>K{<Gw6)z%P(vsq4fdnBzV#`lQyVHrW*e!3LIrq?5L)cpB8o!
z0?V!**vdq4=yy8>fNPDPJydu<pL-TIojEZ$KF@6W`90d0qPMMj{M^yCEmOt$-?@@E
zV~cR50BSI1heeny0n{Ta!*=WMPmNg;uOdy@9(F@0^W>sTRSvN7B{zUH-GxPzO7sOm
z`dp)xo_Urs$`Dy5q=8`#F9K<neuzTIsJw1C;OQ!)C2;(LIdDiRclrk{MjCX5(-cc(
z6~>mvAw;zH_^T{O>_X2JPiVm55I|-r<t?S0#?<POzl@G9ylhjE2=%yH>cMlbDzvB7
zsXk%0E|qNQ8p-nD3C}uxxVo)|Tu}Q2{zq`am2VT#(++z7{I_Z^FEW&cbTAcg9L#H#
zJI@vqPSSVxBch&f^672EH@Te)BR1pY%(6ea7St*8TB&u?hEBC?>EQ(RrlK(G2U+6G
zF9BIiyWpGsxmvy4IKgSZXje@>+0{rck1L2h<fEk;AK0}*tJ~JL2i=vZHjbi_CnNJq
z-M}ZsNfSD9UhHIh=0J%WQX}=r<ddD$Ct+uTXy+vrrch4JQLgei+0f32O_7KAXR*w}
z`WD!f=uitc7XX|qL@g`+7(6~vp<C+M6$T+m_|)LZrrZV*$%*y1gK@6z)Q4}du~gDh
zIL>eXHy0}~b~D0hCZBhc%+#&z_l7<V^PsZf(HW841;bz6+fS|r*f(blG2Ey;nYW29
zlM&Zeqh9^Zr$Vsdan~zLERcEPjlUN%$}=|Z!Uu9PX3ds~k25$IZr>SPK!jS5XOOT)
zTy#{#_^a3w{49Th9M~=+B1Xfav+g%)uaZjZk|j?r?<-3ZF4PUv-IxR{`x?|n-^SnN
z!w;8m)F%)kX{Olb-`g(j1#e}=GaqcdK-?C|M%M4nuwf*dme=McDd8t5@>n9wxLeJr
zf&_zx6)Eg@q$6SW0||Mbf<LIR`olX%&?A%+x@t}{mOX>|MZ?FIP(b-|{#@<A(c1~Q
ze7X!2GTOn)R%yJx)Q~_SJ?#px#~yP_rU>4062c^hnumX>Na{*VfstjpW%7*?){HZU
zN{}pUBl@x-NRXG^8XHox3n)g@yY5j$a%t;P#-_N@Xl_3Gv#nD-1BJGoO1UuU-o6V0
z{sK#F|2bZC?OZ_EUzTPAUtoLpY-wd>c$bps5Ry)_Q($Jflrn}Sn`rJ1*wNon-ypu4
z4_BX(ab2(0{BbK9>82<$rYRwoK0a^=Y1SW9oB*s;G1RED1%n5n!h)_A_?|Q96{O&4
z<BJ6_gJ(*ETq;B(l&!f2L0UG^q@9uLI}MB%&x6NulRNttR91*i!?7ijqZt_B^HgJs
z(56ZOiCkG0w-#hluUL3W4`o0sK@FCUvX|vp%(5soeU3JHz-)|%Zk(3o`tQ{KCoRoS
zkWCWLqEq(zs5yW80m|I?xW^XddvKx)dkxP~0?a&zZ(MsR#_u}Wjpg{T;^c`OowI%O
z*A(KJ&xGGLvzZ?Ze@=wGQVv)DDj+l1qvWU=<i-djK&{tSPs;@2bI-H+#LClC*(Q)*
z+0Sczci}k)lV~*$I8UPv1cu>AM~RFb$lyQHXykD>1=Sn;(qi6r&8)+n*+8=7BU2L4
zu2PPp2yAskM3&WLVlGFmPwSJAtKli3l4`M-{{6#p2`8f<I|o%1xHc&a&-+(VSp4os
zDou{T1JhrMX4(dcZqn7Bau@e%B7Z(MCt$771ZUFSt_t()avu;=kO9m2G9)D4cyCl>
zg|aYL%dwWwlvbq^kxtsvqi*rpiOf8ky>+ED98!e7n0&Sa!aVHa!ztW<8GW`MKHt^5
zn>R;NBuJsGMN1mcoX)T7J){ei<D4faq_t4PeEd)1=mO%Di#X_NHnSR?Z%zkJbmW&W
zI@4&})!xVA@V0vLBOX#1JuLn2EzwsB2=0q5O3@ryZB&=O7K>iobQyG!`1K|uB$rcy
zSW4yy;n$JT#?XNoAb7A2;o<Bh1muE#7=Vo6NjOD9^hmBn7Gf5Sp-j|*2zA@z<I+8M
z!wNNFDu@!0TQ4{f%Rf@@*fvA-g=wCOrL3ik-!2+^OimBSMUwJCdefU};<UX8bPHg(
zrXbmeC2JYGoFfS>%DNqKqP6DJf5}{5+-=hM`&ntBXi07P8~|(ge@OtJwgeJoj{}|2
z{y+IGtVaHVTT{Fi1>(JTqEMNisc+XdjWV&c&?V#_CmhF<sENpq%!cnY?k$`PG$OTW
zvw~eW8=Xr1LcX8@!)mV%UG)@+8FGa_g(zL3HDtsaMC_iB5E7<-g*so!YY2q+-VN`_
zrOz+$YMp9UHFTV%p3ThL(Gg)HseDkC1>)DhvOr5Xx+npB<Sw!OTQrG!RGeSS$XY2j
ziMp_XQ8aZ{-K)KN$(!h}4<o5zP{Jv$@~#4`1VOuhPsrLpdC<bfHcNr3B=dn>s1Fs+
zYI|v5L6(V=Eq(?*8a3Sl1%<}+i1w6NieaE?EOL&{0vdBu;vYdJ73OV{y~|2MDMgYL
z)e|L4AtE(leaD+u&(=nx&pWHPF&`G?e_r0;kqR>FQlVS^3c}=|F0~!9W^1(xSwNun
zmSHdvtg6GsTG<LDzo96zuq!Y2#Br9f=2>lGnk$lD2VodH3*y<>6!!gDI#t06PC!tq
z;s5dIJ<>zX=fjx=WZ@-j04vE(V6n37sXxgSjt^Yx#Hc2wf9E}BN(rIDpR*EB1x>CT
zVa+&GY+0aXCHDR9M>XB3YIZ)7epg}NmlBIkK59nH57cmJ*T86S8J6BfQd=g;5Ea@}
zW(^6=V1YE_9U6N4Bo*C)(-Ppp9DGwbRsE%u^bdyJb}}fq(|OAv4x;w@Du~f$WG=>x
zCfja$lyt4`l5GQI7=*0#ZSJUPVoCzlZlyB)-(IJA67*nf5I>w(ZV&90>c2y9uw;-P
zVu@6@->sGCEp5mj1O)uWt2@g#VW7G^weKSqalaqo$fzb^40wtUrs!dQFdgUchO~uL
z^LQ)uq)yR5ftX<365`x&>{J(`r>*lE?Em3Y`^q~M<@(AhwmItZ#>B@(n+S4Q^5rHq
zXuM&hLaKocTf&gZ=gXWr_z<G0ECig+R4y2&rT_6kq?2U8w5YHPZ;7rs>!2y#E^#Y8
z!Fgb>%vz<axvw$P%?^v6L{&C~LF%TiR02wpWV#G(^GWHNxZLw<$^qD53*|Ju99*mb
z3SVhiVXe<0Y0<~%n))Y)EEwIfh7pu>H@dG!3i7d4gYAgh?x-MzEK-ANTjFd~eIGtS
zS32kim4!ZhwY+8NBco@yb{u>to$g)N8mT%HP_O9KNM&tXZ(hHEZ|t-zktq9$NLmA|
z7PX2Gw1*|wR2;cTcy%-A2bg;{hb-jfl9FZ%_?W5PKmJKI3p0?=U7%H5VSZ)$7Z2WZ
z#~g?aUg+O)x|T6a!zw__rSj3fsv@HLdiK)*OYqMO&-hMak43=M>f*%K`Qz$41PE!u
z^RMmc3j_swJk%$8XFyA@c{)Nb|16yZsX6mhj<lB)5w8Ua-WtG5_T?%<e=_9d$?9V}
zmadh-e4&6F*VO)YD&`^16SOsPbZJ`Il4?LJyBsYE&dm+1!o7?2iuikj73W2(Wafct
z$+g~I;TaQQHgF^l4*Z}LkS>5~85QF8_b0=^^%<kx+{HJVZHMZ!9WdLF$ET<q^WM9G
z1VGsoFpfS^!1Mz!Zb-_zpyP@w#u%{q@ONwdvh=2#!RVh=-%hfkc-%v1!m#;Hc0c9E
z5@^FB&$B)l^X~+}X<EE`_c)XdUW-0Jz4(z@G;NuI9y8yyw*oTTXpb<AH?$=~n*8dE
zU9M;d=7bhyfd-|}SXd8)bib5_(H~TX2Y{=A>xJ4<a1>kIUlZE$4M&2dS*E6bpGl^$
z!GW;rX^&H$ATM~WnR+&i{uc>eT%-{aO+cTXhik7%6lH|6Q92#q5o0l*V19e;r{CRn
zzHz)c^_piya#}iK#l!oOdM?i+x{eMIl?$HYhHl-w*79U>p`Louw)pS3BH+xPmH1RE
z*_##biU1}v0^hd;9cgA7<99i(vnN(S`h#3CV0qPHnP7Osq>>uA>NgZh9{en`=3(QH
z99s@yq*mI|m<$d_^DTj#X_TEl6;Nmq<);OF3(s>p;JqSeszw5K6~Xc=b|66mB2k87
z^*MU;Mdl`(cOep-l{nN&m;t<Tuo8~y{(s^mHwV5EDbe;bj*u=p?m;PY9E7JVl~k-H
zE4OajOkS3C8fH_-8s#)3K?01?Y+d*tC%9=hk_e}jW?sf9<oY{m+Ft?lud5LUI2*Lr
zn$r3ke+;i%a#PR{fbO@Wdl2qljM7;N0GuA=jWaeL*edVkiNn7I7DE%*>Rt?Co1Ri6
zw%iohC79p9cZ5z(XL2C5r@*ZuABb8x#)t+h&IW(`IkIK5AUfEYNV8C9dAO{Nw)djo
zBEIdVlSWTga(tmr9E;UHeL&;#K)w!+iM6-`*YoFZAZ@@q9&g-U=@1xfSwyI!tI7l&
zdF<Y)OZ-!-buZT+I|t))2u)1aDl6*YEpsA=7(|=7saFO2bU4JxLuxl@pn%@d7N0I*
E1^JW0)Bpeg

literal 12399
zcmV-#Fp$pxM@dveQdv+`0Qgpi()8fP056d&<6yV&KbV2;f31tP3sjik#Ew3&Z!Qx)
zgrUm;T)MBQyA4OX4;jWv%x=AL*iL%)Ffg`QK|a5$F${7LagZ^jcPtuh_heQtrye1e
zhh=VV^m*0#KMd30GjE0wzs;Fmku)M=h{UaV_En-Bb7+k;8qs*~p^5G3sLP#>DoUK*
zW4={6Kr?abNd@nJFOp}OUme)r=zk9@63(;WnE5=Ov3RMYZi^|(P6DdE#?mt*Nyp$i
zT&TUJ*j##yXpJ&ave;Oh9~WG)QFsQYSbaCF(TivD72Ol;m%R?Dx<e!qV8)C+S!F9V
z;FLILYFb8y)nPwRh-Zp<z~}-s^K0mvfQP~d4Ibd+MT97ZFr*8+GeMuzbzM8os;t1|
z9Z3^zR(N1RyjXDoG;i6Lfa}@;^B|3m4-#J|Rc#DXjHn9<ln|C($$?7o+<s=S{_ZMR
z7QK@d1u00MFjjLw#1zFP>%wA#9T*e;8^s>dM|8>w{&(e7-d;nXMHZaZYH4v9f2jTp
z0}4ibr5J+d@4==&4Mh??MdV#chsT>H*>Ev|AQp%E*l>950OY{79AWl<XxFy*%GP3i
z$F+ce5XzF=gsK@i!gc!R7Fm8hxjUzZ`IdDqa!~*R<J`tunpBA2il!Ht{Jv_Q5ti9^
zGzwC6<bl>XJ|X*Y>0!DwQ@=n}JlJTB4Y2P<H>v8j;G;V}Jw0QD9MG4yQChQB$X_Ll
zAymOT_lEn}szDMbYaL{}oJpX*T6A2(`!$?JNA=Wa+m|*lu7C3G0RA|gIJ(#QM}Ib4
zO`h9^%WN5~98T9bh?^RuYH>K9ImSFfs{{Z>YpBL$cZ6=kp@LUXGJ5=liZ->iW=w&&
z*Y<XgEbt~~X6K<OjjT^>KlX!K3kXfZ5OW`QZ}SM0Ib@u#Odh9NUQMBrM?POACLK#0
z(;s%Iq7mhN*$jzC*LRShZ1la)lW%eb?YW{-Dd&vPEwT{H*Fdc;bcOJOmx;QCaODJ>
z)Ol<lW^;ZZO34)`c`3zpp!F%L54a5Z(UWTAdDJvA7BCSwtaWhKC|yby8X-}l!#SMw
z2pL*j9}?pmGq|awrt)*z57Hoz*<l*C#p{Sx&>vdjkZF>Njk7d(uA4>dYE>$lhdI+A
zE%SUJ{mZng$lIQSkxJo}%l{%p`UN|!B$hUjsb!iEN~>pGE852B<;obfo6Yyiv`tIv
zxoVw2g#$N9ydS#pL4nm$*GTdc;#vxv<sV;8s8(wofRuf7cS{HZ+=L^Hn$Z(5`K^!>
z;`J%}`p~*fEYUstTNxc9RjSSLL(FNg%kbgZTxq7W{gW1sRoCn`mFji<D=yvfJqT#3
z{{ecG)ZXHtV<UxuXVBt}&a0aG(xQEEqy(`C4+8fXE__&3J=7p@Za#z_#N6GE4Ai;^
z#D@EjnBo74v{AL^CvGQ6lIS9{1yb@^U?j52?%^IIoBaN~g$h+P30IZxlLBe|!2hB^
zP)y?vC~bSTC8IubW>!eE<C7?~f~UtAJ*HNX6i-zTnfza*rQu+lfQVR%b$O*@Jz81O
zo4Piwz~IhRSnVM)Vv<L3#Z((+(-gr|>rg@QAjXHE*ss%G!OF(bexM<t1;5|eT~VC-
zRP3C7Xq~iyP8*gP_W&U5wf?+^-grLEm!*jE<aeVw3C!96W=3B%m%YNUCg*Zy?xu8_
zf1G#*ItaH;X0h>xH7eist4CBE-BF=pP0!oEKIE)`_2u(ZYh*X6@BB_bm)^l$Sj#KA
z>eEkFD&cYnnn>8PS`*h;p*j&F>*(8iJ%CP4iV`yKP&BpC$`l7J3W!M-(IPiY4j8V6
zeX6lb5^-<H1HvT}96DY^S<s4Q(*c)<vWS8raGGg3Nlt=VTQl<pZR*S?J1C8mdcd@j
zIi51%nLx4=$XNRqQt-}2(|xe1f)-Y}8ym-ChA)YAdJ#%1;*r@!t-{2>tc<G%?jJV7
ztif2An9V1pY-)cTut}j(9w*A4tNS_EvQ?P9I1n%zm)R*N$szz2rllycg>Sz@<3ly}
zGD;_5+vEa#hGM*pxrFsj%RtiId>kX7nkaFW5E_cK*JJS<XnT30jWX@E^nJd7R`1e#
z@-&w}8g5sKnt34Cw~wi~^(QUFu&b-|kz?Y&TvwkZ2rm=1%<vT<esQYOH3l}|h7Y|=
zl!)Q!5MV^@H&#d<O$O2o-{aj3{*selMXWj#Q;Q2?R+<vaRY%b>tEUizsPNSH3vaQR
zFUkVOXh%K~nY1S%9UJ&8;b?P?C+hth_o3{bw=TQ~Vv(R|@rEfx=uAN?Q<$N2%u=kz
zyigu38J)tExyPxnp@Nv+Y!3KR)t1F>*9$_Z_KH%es#Bxz<8r33O%s7nf)1m4!ejyz
z<xIwsdIrm{%H9b=84R|LI5(DEb*M29sKbhSo-MOnDBN{uKk_zFghGE!Y^RC9Y4p$F
zdNcUl{XJ^~&+K`7Mi*z)39MB#3cX+LnLfr7Z+m<L=UI6x@DDga^ZlMqH%A^@$^5oB
zkWTTv{S1MP@OQOP(7dg3>$;UEtI|^LeBVsy8;f-lsKK^d`IAjP@ZU$Fp1!<2az%(S
zwgV3<{1<$PUfS$TJ%fs|2Ag-WRLKQmQrpR<{5}kE{UmAW>k`$1&!Pp&Mc`#JP~rjs
zMz^J_XS~X?;^WVpk&Gto?%%Yk?vK8?8nLUrHT;2G(#sF7$Q#tW3Kn6pn#K9?F9w>Z
z2<h7P&bsWyUP8;8IojlD#CcU`3G*XQFaDO?EvHc1ZW*QSm!LNkA{3`fE_(^@#}w)h
zc=DebO)no20z%CY6#%m+vj)54R|yf@L{OY%l8W=h(tG<Q;odNs($C1k^T;GZczI#-
z%GyJA)s$*tLB})|gNNmiJzdYegb?AlcqZ}c_Ayw$_=T(~_R4+uAbB8Xz(kL@I9ub9
zO8-#aK{fz(b$YfByJ1w1m1~@bG5)Kydf2&JQ*68U1b91gPbWGLBF&OYjWJ@HYT8?P
zqj{vEzjLu7VwMOS(px!t0)buz$Kk{zyfyzfOuKkd-6Gr5(Hfg<2asL|0MnBNat1t1
zPa2GDuHdLU@F`sQ8BXDh*_1XV7s}3AcbH+C&r2t>0^u39Ot39p)ujz2tfQO^bcIxj
zaaY!}9izZToh`5}uo4!yuiAus$(+5jVPP!F{Yx9MziinLa~%Lq=*17iyteY3!=IuI
zP@Sg(mE*8QJKhT@_Zoz{$yH}J=xBDM2!W@y;;MLdFAcA(SM&xyp;kl+B-zOt?OZv6
zNs5l{EfoovN%+MlZyQ%mLMEMENY~Nt!1%nUCktf5Kz;O?@WqdCM7W~6&Xa-K8+m>(
zdrSmR)4JIf$9Z3&{EEZVTVFMC-`O$h7q(gkPRd+LfKcIuqCS1OqClq7cP$@ERIdm%
zQj7AZ``GG&n$`Czitce%8pZbP4$LIN2qyMlzJKgVg6xN$Bg1h__SxmsCz`aPJ8v|F
zEOjdv4-wu@w0r|;ROM$l_+(5GUJqwf`Yd?;)GLOt@$cosmKcu@0Rp{8nG6k6%*}$~
zAI@R+`LS1P9ChaMSvu&cCAb#&9?WX~Ff1P<rn9gEp$tuYG6kdg?UqjsZg_`=Zb}ox
zEej!-PLW|u;2<q8bWJ-hil^93<G5c3ef^r0U#kk*kOXobk6DgdT3hE?FEFyjk9tBY
z(!U_`+vkApzp|eeX*!uN)b`Sd{T+iPqLP>Tu}&27Rk7YLP<IxO6zSlAXO{r=BnQFH
z4xR$BlBOkVYq8lM<N@mJ9V3yW!FH%5767>1M;P%!MQ|nl>NXTHkgw>g(|~WrIdffi
zlXB=#%{^yBrk56*)Fh~)fxkvaUFtq*Jr#`<x=7>E`V;JSbh=MRzg8`QAQ^k0OyO~?
zWZf-pj84pQO^)J;KR4|qD|?$qsDIQ75UkcaII;+sX>-<5SdWQSGvry?<~kCBNNM)t
zFDU3q1QamUN@2;=P+y|scm79=B<k#Nm?&bUI4qLAWkrClwn3*iVube*g6^FStSlX9
z0($?B+4TnnpO)6}Sr>nKcTAqZW)wMZq!73$)^88Xa1?5vaQ|6)V@u6~6a&Rwkq$ES
z^lF@%h^zThFmYB(=9TL)2xi}Z2^&x{bbzlm-97k!5(jRRBpm?b%x!RFAj*y-X)@!!
z-3$D3tt)Alh)o2Zf-)r<k|q3u&tiuI2JeA{Fwuo2c6KAg9c2N$pfAvAcnaD{o7X+v
zW_YezAhGFU6>$IQ4JhM$J`fz(&9ZrNBAPPn$?7(%Jb?reurMA>&fN8qN;IyG{7V@M
zP_?uT20+{=AZk&(4tLi4A!Kht$4SRPTMZfCRtgoKWiRUtfJ%b}7>OWdJem4uPl9!)
zCwa7<oUJ;k;EdGVU!LIizTMG~HTE+muTbDZ!P0#N;3*?|=-F=Fl8a)&9uZIPPvL6r
zb^>mg)-FxH-{S$fQxNa1B1osy!Xif5FLV?jiU+!3ZbG;?cURdG&(oNAb=x^F2KsRb
zFhlAsw~7rZe35*rs7JFO21IP&PQde+`vDumbq8H>^k}QEkp`~5mM?3V2hqN~1XkYW
zpVF`)G?-pCxyO%FHl%j&Q_&MUl0yuJm>!1j-tKCel{s;Q1sYZ=!ii@tg=|{{1oV|m
zK*7API&TBS)MnXfcEeuF`XoJ$=cQYP*g@1=TZJmXE3?pj-W%fEiI@f!3s!*DaQ%gf
zqfe!jKo?9a7Zr?yxwbQ$8u~xm__4useU(@tc;X9t8Y?GpUxEM9H_XwG6@30$AV0U>
z;uz<WtUA+JSxD-bzt2CE@V7~lpLMW~D|N$9QS|~@>hSgo1jXmMHRu(m0Ht`9$+z2k
z3-hR1T*{`J^fWtWx+Bql(d_|^U+z<tE~xJ3)^#HODp@x`{`g6Gzv@c)|7V2?u+7;l
z9obUCD6Lv}U!eqUYqIYT-|Tf?b<XJCtgW!m*P4+B`UOqg3<IPorkg(LJN}_IQiVxl
z!^~<Le>Fxphwa79_+twBG#(8{rK{tmS2%>ej3;7^;p+s0^2b8yh2%JbY>*jLL$76o
z`F9gr+oN-m?w*T9(NqB8`gs$Cd+{R00@f)Iy-h3XPZ;5a(knpvt4&mkWE7#Q6=5?f
zZUr6P03Qgg?L51EEuw2o_TN=OjxK$M+Lp14B1l}*g~#Uq_zz&fbFWwV=BE<Q6s#1t
z*9kCl--6DP3A&0&g0K7IBW@|x9E<NL2pZh_8|xj@kk_R@*HbCTA1OB2UEJO?cApfn
zRLH*$0!IzdaK$ui0=gBff>q!K5iJB#3n7}L20O=<ocQ{Yznj?du|txXp*Tg62)fc-
zp=oS*r_b${dsKCQyY<H>4R`vLrQl3%nFhffE)@~yyH9sSW|HAO%tQT8Q&*Hen5cGg
z1z_A=#f<N@;+cPLMba7b_=G<<ZN54WT+-dBle8LgU@$h6-2DPekK+_F>PA?bfmpp{
z$HndYOMPdm)w(KtCs+Hz4@zvdg_AU__zUPMCwtxc>Ykt8#%?rNjND#s$|Ow>bM-Y(
zvHe*6!Hu}8y;mQ};T#N;`CW;4)5SiIa?2Ooob(b@o?Q=bdtJWKj3ko+h3Tdx4>f4T
zUed<f#usAd548%d<Y+o}VH^Ck&WnHe?v*N)VWyF2>N=1|F!i<GDX$$p=$Q86NP{-;
z3qiQ@m+wo$g=)lMoLR%(4<;spJQ>sp6g9%i(LX%1kVQa}%N?3pmWQMcq20SR;sRU#
znwCorQIK)tZBA|LQ#C^<nop}0zA?p>_fqM0jG8WcKyHj7GF9iRL#>#Nx(86UO}E#I
zmD%!7l9C|wrEGY~2k<NhD>JkUfcAzCx5p$=AL<R70<Ux*NRl!GlnmmISw_zFCSgJg
zh*)^{nz41D3*QCR00D?cUgFPTFLCTRRgl=l>Jbtq=_Aa1CPh})$Jt<}qM2|NuRQSv
zm9Yh_Z6#)iz&ZsWbFl8BBR=~P3t6F29;L7+us^TaSLbAe5PK89szBDJIz9P*ezG%G
z;&(wRJrvO#HZ||*r`R=jutZP?4^AO)yK@f2SoB;@ffFiISJ(@dp9r^Ak{3NVpvL1k
zP}@!TvdGdil7-7&IYINB#h)?h>r>$ZnRmOSXqQ6DB0blQ^`ZF56|n2$9Gb)lP~_R&
zYUw}sm#yUMS`bcbcIeQ&UfO;ES1<<<UtKtbQ(shW=&f>#-tA8|t%4&}i7{7j=GM+#
zcLuiJBKbigo#M%V$2F?@3$D0pk`|Q%G>ZT$+#wLNIt<72k$n}*YhhCeE4K2YNdPXq
zoMx!L($udWY`#8thBj{SgM|VZK0Z0i?dC>IGWp2MS=&>K9%`}97i<{ow-ayhbTWV3
z3jv?0gv*&L6Oh45y=%Z@EL4c?=qD;lL-6?os`B5>v4z`dHjF!{L3#_;j|O8Hk0u0P
zc}T1o(>(fqeCoKR5!h>)dnrVRh!)FNUAZsl6;pLA&VH1^O&NPBoT%JTJdBG_VQNY|
z9Ui2d^2B>(A+|GhNveiw%H9Lko7g`<2_Yc!6B=wrBJE6i0fKd*l}39&>6=$zOOGsK
z$nWuJbn!_j`)j2w@*6bNPX(n6Yuw2qiVq$kAYe*n{ZN{iL-rS7ciNWP7K})ouy6K3
zEhz3lscmH9vVODB4Vq>o@$9;&W%<hF*2xB1$104pY&ZL)wpQloIA2xf&Cx6U2GeHO
zMo`abbwmEtG#^?oqOF|y7EyUdrW`oyatW1Zidk?BU9>72emxb0a(<YszP`KI)&mNz
zzA<^WwAHZY^!v{di_8fX2ep3?V)5{n732YgQi{JWQ;bT}I;vZ{<4;YiOFt{+xk=@c
zD_{5lw0JU*hMWkZ0zp2fBX7qpX<M5-_^QLLTGwVBtQ6DFWcdS%Jpu$9M1#PH+c*5R
zZ6&S=ss*y^lqLK|Kk@KGAq<(>>ZD}1_a6M0Uqa&>2a;Dqbw)W`EIRkFX`n8o^t2+%
z(^g#R<^psT?p+ms+Cdw;Htzhxi<{xnP=xkht5J}a!}%A_F15DrQvJ-;smbT}!0Z2}
zdR?-*T2ISHk8&*sjn1o}$VCko{kf%v9j7Pp40FxP$re~|C%`9AKQ!@Suf4&V05V<?
zkGSieaIlVM%vToyI|!$OreJn?Xp-2DJy*QGux<QFD<-SBY!DskK8tU2rg8P`iMHYg
zV_k&Klbq(fak6J~0lmdbSw>RjIfc8Ili9&OUr)42)jejXoo!AFS|0Z`DdH377hv)_
z8(7Lh63d;vsmYtCmIEPcsfu4=2DXgADK7DJ5xKZ90O1it=`T0g9ro*0?~q2L`-clZ
z9dnHw)_Bjhl;^u&C7q%WMF|t1wl2?$;bLo<9l&9IX;cyXq@WwDqr(|TMayd%;jVpS
zGDc%fdP0$M?nlQ^Q@xsiA30~mh8pTacNA#G5Z4#9COl7SM}Vb*H4iM6&P30(_eA<j
z_0VN#<60e39QJ1f7yP~?_!}lr16UBp!LhnlgElE>1%QNCh3)@4XE=3_=61I^ncf+I
zXMkDP@ZEb%ReJGBy;RMzRrQIyC8mD&Wi(D3?Ex7VQ!;Q)$q5w9KolMp=npG!4J->T
z3RYN@d}>r2&>KZonx;UkidD*$j)r%25jj)_+oY`y@rV-gk8!}wIkFC~xR{y&;s;}Y
zlxoODqnMOca$OHENC(~aDTJ1P#4mtB%Vs0q)4{4}0oz!_<PkSzYgAg^Lx+g&CUg-t
zVHzVD9i1m4JLr{VW<)4lLDy~-1mx{gN$Ej=YtDB809M&@Aup7*^v<;a-+cZ{@^JN-
z>AiE7+f?+Y=9T3JKn16^=aTmcMx*eRK50VGUr-wLl`9EuRgS0Q!SHXHY=2RF`vBXU
zSTOJjX4us6uOAlQPT&U<vrJf@Narqx$lYDO!C=M@%_5EPTz`6KXz2xqPHf7S^_*BX
zw%=fhiW@00nvuHV0o^=EHJ4jsuSV|NK>S@c8p__iu#W!UNUge>xOf0pot_{j0=3+N
z>tA+_;KYwQIUR%j#r3S=U22Oi%nv9mCmDWyqr&~+ai1k=7m}H}R1RM0Pj+tTtd~NR
zfg$}VwL423fGOes2>W{a-c)PDUa4mZ(lj78;tgs=h<=$tIh!=frYdB6#xvRl-b(O^
zL9X^k78hAHfN?cq7Jf~aA?db9=`<m^pqDtP5t6e^N6-#w(q8)Htc?e~k+#l0_fCK^
z%x<+*N2>dG;B_)X5a16b!eQ{Pgv)BNM5daON~lPgf}$51fU_liF(*hcn@naa4KWpi
zWK?h=3j|)lS^+u~(q6d|O5%YLp{x)$P6<m(^E|BoXUQJ&$9<kRp;a9=?n9q{$fK=z
zqm$BWww%gO!?fCjP@v|DR>%LRQm(Y~9Mka2q+9Gn$-|*z)|EL41A1;CMDy^X(7kdW
zf!4)3zz^DdSf|a9c3%gLFKlg6D$a!)02-0UPk$CCuo6H{niOkmJV|*YWt~D(t|)^Y
zLRA*vX>=RnNH^<-4#!}%e{oCe`J7wm(Ny7vaY1jHNbZt8pb>smI$x#8XJ{3|r5HSs
zX<yNBx?=5W3X3Uh@3Ne^Ry#1h=x1F>6WTF0ZB_yMgb-4vXXH&-?sYD<(B}VQxe)zO
z_$8Jkda1taHdoX%67K>}!{sDDf?+E#0nIlJ3gc9pj&<E7$TaD0g$*uc&3(XCbq1p^
zjtJ&+tELW1XUPoU71hZ8a=wPV^bi7UL$=;9MF*^Yorw4oj0Kc4ORTWIn4ftsg_0;X
z0!!3SfBTfIYgn_<|JEQsxGaeh3YzpxA;oZgT65LUM_3rXybk^>3*iJW%2dY4!;?bP
ziH|Yzgg<Yp_Ud_{R$jtHkYW_-#Y-Eqn_!L^OMbeuupmpAi7;>xG$-H|xu=bMCy2+I
zm=*@6ewN%y7ooPe|D5UGx@4y-KFe9S7B${6!H*Q9oE$qeQ6e2KX=-zR2(U%kq8ecP
z{={-jRpook=1P`@)vKqHzsPWBW9h%<LHPKI1^G@~Q2QHs<{V?F;Wae$tta-nc2B=F
zr{cn<9vWy2qmD<2T-r3?QMyXJRY8F}0vkG&vp1^{Zin_{1*4^+At*aT7?Hw<NP)?Z
z)saNT4m#%B5^^~#{PIlaVJr(G`4hXNg%*<G>Z!sA^7u8kkxmvk00WDGa_G$=80&{d
z91fGudftq&u61uDd5Kmnm}wD;_SX2>x~j&8vufAOiU66N>;f<#4RJeWD_wi<hO`-c
zX)nZJE!~5k$UtXa8Vo$wH|G<`+rJ-OMg1H<93}&+c}cksiB7h?iIK?)thp6#Bn?Y0
z7AMaCoOD@MVQl!!2t3u{*{QL3fJBf`5V*vBdkTBt<6V-`zIWLvj9|h~8X<hr=2NZ_
z4QY}Uz(eM~vz9lrih@VK>zBNTkP#GK#6$or2xsb{*uA9o-it)xAqs{WC)U+N$r++v
zt5Y%6&!Ub#LX1@iP*d@OJSm|njKN>**^A7dYe|!LuR`YJ8R6#|YXw$N0Ep9OKz0<0
z@=3QL2^+Wy+0*9SKAop(VenFRw@4+Z;G@LDBTK%2*)J_9OuU93IllrRlhLs5Z7Hbf
zp}qd1=MM?EI~#9MU>RlHg8NBS7NfRLeQAL!J}9DZHU|2SmT5}50~Uhx216Pt&R-p_
zzZxvPj?8Ova3a~_4HMvv>UQ-tC023&6?59({GTFaK=xN}Ow(l#5bUSE07sW{VE%gz
z6v*FsBVpub!X(F79q~d72T?tJ3axq}O^H2lW)aC+P?*?Lc3LU~?1QLmQ_w!vT3G9J
zV>{dlz`j2dGR^i7G5F0^MD{VkAQ?n)5B1DbVeG&KL<bhN@<h=;<})+`8*eScNGr0H
zDuu;tjOhY1_HNx3fd%a&94ULl(bw<sD~=NM%VESn9L-mrSk@l#1Ut!W*-j4e+Q#<t
zB&2ua9;i!B2C)(OZDURFxUVY`CXTl&D*JuUm`BNLNJ8X^We%t8XnS&oY4!E-g6BnS
zu)eEL206~dNkqzef<?!8)1a$+ndHN@xFV~3NL1Ut>Pgk%zN{8u6WL5)t6d;<NFhXS
zrO@XCyuKsdyS1EP^Tt*<L=t5~j}L7?g}j3xv4wjs5?Q(0t1Mw4$>^(JLDD<GH81GE
z&CB3p5r|@4&&XUKmr1uI{qy^&>KX|kJ%cE{K7ftB2H%3>Aw5g!bq=RFGnyv-{%oK0
z!=H@1|DBJ6Tun)LYtZmCVhql1>x5k6cUR`ziNAgmA-!7q9K%!&4QpXL+wLeVU)B-a
z>@h6)>P$&HN^!N<xTD^eKNmxO+>A<?yKGsdIHkBN;&%{^dJhgW7T0!{{vGgZOF`08
zBzz^k9S4W=9|!%KDgTNR6$Ax}T^hY2s2MV`=QkZ`JCrfM>Vnt$6s}NfpJ)(3=j~+4
zChnXF+WczOJME@28kzDBj}#RSa@I8odn+u<of{b(=LtZtQrY%peDNoyyVzm8{VXqC
z%C~*Ss`@w-Zn?zS_F6fhJQ)IqXeO5F5J_JSbA>bw>Q7f>BOSY1YpNMuC>lLnBeocN
z`?Q>5DN+7l_aJ7`%Z3(cZcEyD%_eW>h#6sJ#M4+I_t&OTy{wm6_z7+`SWAs6nVgPA
z>J-kbF|zG*fbM=qXQf`S6(7T)Y9Z2}PQvTZy3<~j_?7h=g_RR}<8G9xixRkq$L#Yu
zhIBh3g@H4rk(Od>t>o(!2KQd9u{yW>j?()H^1+z!D8lU==((j-!WdZ}8rlAcHf#-r
z&r)aI6KK8PBj#xteeVv7=t`d}(zB~PY9dK6Db?;WD>U8uf?crw7;~(&4h=oey5ene
zV%@kQ4Eoge93d?&1^SK2K=2$Mj3;+tdqKqBx+Q==Wf@WJ_RkYNE1K$EE<Kll@hZ!M
zPMu`i6|W`00*aQyq=UVH{3X4R=2-<mQ$~1W?tLMKAAGI%I3&#5t@O<lyeVVjc@A(C
zmn&<-c@zKu{^cTc$K6(du|3w3bkUx+>z`I^Jg~4FF;+u;iI>Ie&%%r~;XJvubk|#P
z9C6pMY$No3X!MWx9^8XzF}aNNK3MNOSqm|TGe;$_H*b-SR0uTnL;c<9^+;@tyMJRO
z6@aeRyC&)JW=NY*cyrQm!6Y>JZ90|?%0J9G;J-EpW~(NYaA^K7@uvS*#@_`ttNJC8
zah6MX1IecvP$<><rxQpW4awtY=ekFHyiY=Z1zC3^R7h@1>Y?b$;*&3b$@1fwLlZ%^
zCC)dpDwXz~e`9S-<cIzO1x-G=U!Z%bB4328k+-UyZ6pK<wy3%YE$|=c44k4xm@ku9
zG2O6s8XesZgJP$Pko<4-YhiTEJwA$t`(PHq(Pp<pJ&dz?<#df}974Y&7H=M_;y6gZ
z*DxoN)z&o*A`_-_YRA)>97l*D)gKs=DMA9w0k%p@!P%*3omjNLm$@u}1+I~ZkEb{K
z2cB(|3_d}Aqf_e=;RYpg+SBe{(tHJe8@lDLBB4!xK8ct)&mno=j^DvLnWVU`)rANx
zTcG;Q@ae}G19)7<>~&qiidb}_ytl?=%DK++dO)8}i54f(Lbu%3gx|o?{MWwD+!gQ8
zR8mIG6s>EEk#wFP2QiO#xt5|@X>#;5+h{>N<C(EjMmiUz8t<eK{3(2>?#ddygVYBA
z4a}}BT$xozBgI(i65df)GY+mZ58&-xN!SQb2-O<0uwn#>IhByn;c+}R%HJg3%BoAA
z%6%##5bDp*=m=xkzSa3-KI@S@Av@cCswEU!PO9`n`K<S>P`y$elv)AfBu%40pgKqS
zY4^A}pW=GHr~fV{)(19J|4G{N(uZoL&P!Vgj~V2LvCY)ud6g{&=}zy+*dD{2aUYF3
zMwkbg2iOU{s}(NEaDVHzs>t_7gqexMN|;T#PVC8SljF-?4_S*MLIz{bfcSy|ca>l|
z9aaqUeX|SG^jSmU&Gd7EiM6&@-1UF}4FlzKv&==~=rk)fuWM-#;**>+`FN)lUb%xl
zfx!$x9x1}vs*?%1=XvDMADF0~l9~u7>f&EJc@Vg-sEJa>#!;D+p{c<TWC1Vda%+U@
zrGfXzA~l0jZ40P|RWh4aAU|AC%$OB6w@2Gcf*iL-x<toIb6kj+Ar8ixuKL9na9A1M
z-%Ao}6C>P%=`MTYRX9pWa?(wBOZtqj2sZ6!l9{4FQHdjH?D8tU(Dg`Na#Xf)%Krwc
z*8)y}eyEDy?xa?D@~$*gw#yF;#pZ9`->7)H5#3DDGjO|p^W3io;G-_I)d}7YfE|xf
zmN@|HJZ|+AU*?|Jf;kfyQ2R1*a)*|BH<)7&mo7E$vOl4)6<kOR_>U^0ZLSTvG5~=0
z>|hxL1}|zAWxaFp{^Iz^ZWd7}Wl?$b?|mK-?+EhD+RF-Zaq;y%<|B6u$w~K?imH2G
zCVbaiVOPCaw5Qg_F_fc>=kt<eCourw8-^QX=bhe$$j}UURL&E~VEE$((<#{@;1_4r
za6g@<J61JUJI|!S2gFKn-sDbl8`Li<8LC=c7>nPz=DQIm{Ep|2>q5%~_7&O;Utg*z
z$(M979-)X&{UJ|@*E9>kI8z<pBYcZe|0$nQNdX97+`crItURwpMeox?wOk!&*LZCw
z0YpsP+XbgJH<DVc_AHMWkII!p*I^6I1GJ=nrmXdCQd^xV^|9Mzqz*vGz?sI;Peuwj
zZU45sK+1g^iE8}@%lan;qRsly{}cvJe{(Cbu4ZZYg&tnb^AYl8^+a9qJiRPnVR|R&
z-&Dm36*4YECS*F0Wc92`BRZ)qJaG-_SqHhT3(yiSe{Wcb$-9?4Q4K)K&l#>`<y5o9
zAuMefL8cirorIDD?dBUZtBH#RAnhoE_->_iiE3gLqe173vLyejWf`U%6<=*B!*-3U
z@R(N+O`gO6?v1iDwl<!moxP0+@yyj+nzreLp>SvBVvEU-0&T)}JK9FUoD$rj_pKr^
z#|Ws6BaV&41N6BJx(`*Z27DvL!gOeA^ko6Z=JN(cqa792^(=y`^j)uHxRX#2rmT|c
zGH)y0^amN@j25zkfhf3DXm~BN{D9Uuia#c~${R4V>c4NWhjlDWu7<~MzE2#|<ZQow
z*dX|E3kso`HF`UU1V%(2s|@Vn^z815iHI)Ilp%!Ev6C~q8R=p={U2%|I1RKxEmhk*
zR)Wg9_ClxUbd1dtz`>1cL)XtJjuAwcIu{iON6ao0vuh_2?cP_$NI_<zfKSff(n?ga
ze(n^qH*Kf5X-f86vQrM6B`=ME3wz3+qd~@<9@x61d)UiZ>LQN5)?OYJ1+F{pT>kX7
z3WhKPpKu7=1*8el&Gt^u#v;CyI9K(GV8I(%Nu+xImQ^mPDjxjFQoj4dCZ}G5406j9
z02BvdKtx1A<Nn^Rn<(b8*|6~;+uH!h!C&CB4C-3msq>!N9*K`b4z+$V?StV4iO(w;
zU7}jv=;Qnk`m3eRn8m=*-<*BRP%r&5?Y16flDjw}Trh$Mhw#qxY}hgJ(Y-RwMj+OG
z=*vlr#=MU*cey-VHG&E@RIbZL8_j{ID?{dn*9X*($Ps=Jm9R01XyR;a6wc;l2~g66
zUfU&>o@SX#C8wW1<X9P}XO_`r&3gg2>HGCgcjy1oZL303bm$I!M7Tt7WzbXhu{xB$
z^3aM6Y4@c*QJ!v_Z8$(>3d$BT;h9HR!p5}pRS^S~)G2S=d!M97_YdD*jU-upfgSUj
zKn<ZW3VvgR^5wbu|NC<SMtVqmwN?LGF)gL_5PHG<g+*XZm)EpAtbBH}_!0)Fo*f&}
zMc0l`;s>Kukp9~FE2f!Bv&77EH-L*JXExX<E25c71Xn(v5=l*W>`4lfD>Pg$(|Gq#
z9!zadE0wR#O}J`h0^T&b^(|UGg2bGSeJvnRnPoxY^h|cM<5)@u57UJ*z-K9GOBv~!
z@u;z7fBKhI(4JGQ_CE6!H`tLqtOVo%Eh~B^%Zr!u{}(Bpny?cXE=NJm(SR_C{FT9{
zQG@7qyooe*0MnsZ({G4b3(xYYt$N0cbgV8iBa(J$b0?b}DtID2#=!22CKSG|_t^S$
zBBv8L9-3{(ktEJ!m#iOr;Rd28-7eN+Bor}buoj6dqKf$84oI1?C>Jh$Vq#zZRc1aH
z?@|3}3aoV#Ozx?K@|=KTwbVdK2cUrr+%dCYX<i<oAK#?It(%UH)sFGevG$WsGY94=
zzF8PTY)#P2`UmW(OFOw`o0y;JP25t9li`?9=NuT^JuFeqaG?ZF?DJ+0{Mq>MXwmyd
zxEnr*;N`&XF+W%1kx;jms}G+!uwksyvR<Q9=3gY@ZPu-~Ts`L2c8+i@)ubJPi+?(H
zly9EjchglB|0*vfy+OYpO&L_4_5TJ27x_SDcIl!%%%-w_YL1;wv}Fyrrw9tpB*)h7
z&v!4mrC&tl2$DN6nK~?k%8J!BqgJonfg8bgth!Eu1UYKk@v7b@k?EwBL;|a+7kHMI
zEN4&BZimp*r?5PdFd<{TO8NY~ulcJQX4send`g$srq3_cu%V&bu#lRa9ouPVb;es<
zzinJDqE_Eph6O%yH;Mp|J)2kb@`w~ZT|n8dHv9$)Q>)aUle<cxW<;VAEx4ExZekVi
zfnj<!3U7z5vG+B<l)phnnPPg9i4xDrq>`qp@k6~6z%s;lL%*<B(Z*UL1ErwfrCc5k
z3gT)ZM2XV&Xy3)l(w+$lU$3P!e*=CVXlX`L=yU?C_rg`(qU@LLK98yMiD^iCPmLY9
zVDqYExtpRKEM;IKfYalX5f_;H7@8B*%_jJ0W8fyb{A+f9Q7Sbf5Y~k$eU3RaJtQ}J
z&;JnZ{zj+)<PmQmysNY52PO}3+my%j=_t44CvG`q2e08`38)57^uClYH%{>9*|vwZ
zVoN$%yx?a!@V~D&AIN0z71`l0O@0K>8?W-?5xb|8OjA_T#ROSpV&c@zl^O<>-ry*C
zB?lb@%UwQh$5;Oq1W1v-x~f}|sqfYpC+Hw~%p=Z0=2JgjN~rb;2uqgCWX%^@9Qa3P
z9p+4Q%<fYsDa~0(76Q{DtN?P`RTOR79c6?~Nsj8UHd7l!Vyy}|@N%TM2LW6{z$NJN
zIjw?;|AugHJ7^o!Rc3MG<J>Wmql6LBs^jmqL(2VXc~~CQD~xChWGCzORM))F#OUUu
zCS5`WIM2t=gGr1CxQYtt&U|n{_WFix%pf9hPsT1Kpjd^%jNwgt;aSCWzPVsvf4F|l
zB`Pm;JK2W-Xe~k605tDc^vh`TB1x2#owKq_4{I)4C7j8gKNS47Nh=lN0`F~!6xX0d
zEikCYvPkU8^I}2e29{i#w*|%sk0;mPNzUMXNVM>DNx{)WS|JvgCO6vz!jTpKJWLPm
zXgzMA;MqyMWK=gkNt)PzC*gWzxG(8fiGJPeh_5=Hs3WBU`u!tQU<#whDZ~Wkf4geH
z^A{z?I$bt<Io{fl6@W5raP1L1LuX~EIDWSl!@+Fda_$xkS$EV*0ZI7L+poLt<+xuz
zMR>;N%8`Qv@9G66rMxah#A00CIV$aJrgR6E;1o8s*oZR=pqpn8lYlub+nnU3A(9T=
z`W;RmKY;2n+Zqtw8w;|9%*`K!V>+~ylPWvuD6SY~m1d{e`_XTQjMuix)(Mc$_Gm1C
z<buy;i2h0{MVpUNbc@^jmO!JRoM_3PWVb}~M5h&cd3iHExFCP9>G9J!;o!X`Iv4a8
zFrx<i6b5ipNN8Q3RwMomxb&S>F1|e~p_p2Umw>tW>U&A3akKH)!YYnguO!W*5x9cL
zKjTHb6FZQ=`>I*5mkrHL(-P3P&@jXhI@hDQG|FWw9k%s#M@k(DN3M`zE|IfxMSc+{
zARo1O4&uKe-H1OaYFpjXnczFT(tau`46hGx3BzYnHu0kangY{o>|gObI*Ha>Rc{Z8
zWf(9b4~TUde{p<?^kGRM7pVbKu9um!0IsfEFK(^8n)my%a<EtQghUt52R3>dj$3-(
zFy|Uy;nD(dcBhOjKuvLcrDtu0@R*`MoZwm}@SE+Lyl~qdYMEBy_jz5&tCoN$x-IN6
z;_WUJIige2R7JA=LS1kfdatv4{|=UFVhls{d?g=B+dz7yWNsXCs8SCh3UQ@P_JPM{
zn!H`0C5f_$=Fj?xh>2)}ds|S&`a#SiH%Xn+$A}NSS-u%C!)HsNGo*)IJ#K1k_TB%8
zxh;v4X~U>g6fLjsw|vS^SN&nv*si>ahPsyE92}Y1yMHa2Ky2pfjjj?wfz{TlKXL~{
zNG<Lr!MS?~U-Rw#)2`)<JSdH5>Q{4IisYA5rWF>U&=%r{lzZ3pTC;4#wRZD<v>B~`
hD%HB~N5^-w!m%jC)Aq7ituh;qQ}M*JqD;F#uMPzZ+1daA