ttsreader: bump image to v202604240053 + Kokoro env vars

Adds TtsReader__Kokoro__Enabled=true + BaseUrl=http://10.0.56.20:10401
+ TimeoutSeconds=120 so the pod routes kokoro-tagged voices to the
Kokoro-FastAPI backend running on BLUEJAY-WS. Multi-engine router
falls through to Piper for piper-tagged and untagged voices.

Requires nftables on BLUEJAY-WS to permit tcp/10401 from 10.0.56/23
and 10.42.0.0/16. Applied to the live ruleset — Puppet Hiera path is
the durable fix (kokoro_server_enabled under profile::security::firewall).

Tests 107 → 114 (+7 MultiEngineSpeechSynthesizerTests).

apps/fc-ttsreader/fc-ttsreader.yaml

@@ -142,7 +142,7 @@ spec:
         fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: web
-          image: localhost/fc-ttsreader-web:v202604240023
+          image: localhost/fc-ttsreader-web:v202604240053
           imagePullPolicy: Never
           ports:
             - containerPort: 5217
@@ -166,6 +166,12 @@ spec:
               value: "ttsreader-piper.fc-ttsreader.svc.cluster.local."
             - name: TtsReader__Piper__Port
               value: "10200"
+            - name: TtsReader__Kokoro__Enabled
+              value: "true"
+            - name: TtsReader__Kokoro__BaseUrl
+              value: "http://10.0.56.20:10401"
+            - name: TtsReader__Kokoro__TimeoutSeconds
+              value: "120"
             - name: TtsReader__Ollama__BaseUrl
               value: "http://10.0.57.17:11434"
             - name: TtsReader__Ollama__DefaultModel