fix: make popup rendering deterministic

font/PROVENANCE

@@ -0,0 +1,37 @@
+Bundled popup fonts
+===================
+
+The renderer tries these files in this fixed order:
+
+1. NotoSans-Regular.ttf
+2. NotoSansMonoCJKjp-Regular.otf
+3. NotoEmoji-Regular.ttf
+
+NotoSans-Regular.ttf
+--------------------
+
+SHA-256: 9cb49a54e520423033f9727be2e53e4805a60656deb09c219740d8e5f3e033ac
+Internal family/version: Noto Sans Regular, version 2.005
+License: SIL Open Font License 1.1 (OFL-NotoSans.txt)
+
+This file entered the strans repository in commit 874b941.  That commit did
+not record its download URL, and the current upstream build is not
+byte-identical.  The checksum above identifies the bundled file; no claim is
+made that the current upstream URL regenerates it.
+
+NotoSansMonoCJKjp-Regular.otf
+--------------------------------
+
+SHA-256: 4d01725be822d144cf9a56ade981e6fb920cd7a610b8fc24cc601a920beea5b9
+Release: Noto Sans CJK 2.004, tag Sans2.004
+Source: https://raw.githubusercontent.com/notofonts/noto-cjk/Sans2.004/Sans/Mono/NotoSansMonoCJKjp-Regular.otf
+License: SIL Open Font License 1.1 (OFL-NotoSansCJK.txt)
+License source: https://raw.githubusercontent.com/notofonts/noto-cjk/Sans2.004/LICENSE
+
+NotoEmoji-Regular.ttf
+---------------------
+
+SHA-256: 415dc6290378574135b64c808dc640c1df7531973290c4970c51fdeb849cb0c5
+Source: https://raw.githubusercontent.com/googlei18n/noto-emoji/2f1ffdd6fbbd05d6f382138a3d3adcd89c5ce800/fonts/NotoEmoji-Regular.ttf
+License: Apache License 2.0 (Apache-2.0-NotoEmoji.txt)
+License source: https://raw.githubusercontent.com/googlei18n/noto-emoji/2f1ffdd6fbbd05d6f382138a3d3adcd89c5ce800/LICENSE