Pin the JDK 21 toolchain so builds are reproducible.
