ocr: bundle Tesseract into release for click-and-run OCR

Make the standalone exe work with OCR out of the box — no separate
Tesseract install, no tesserocr DLL hell. Verified end-to-end: built the
exe, ran it frozen with the system Tesseract blinded, confirmed it
resolves the bundled binary and reads text ("CHAM RUNE").

- ocr.py: resolve an _APP_BASE (exe dir when frozen, else cwd) and prefer
  a bundled <exe_dir>/tesseract/tesseract.exe over PATH / Program Files.
  Resolve assets/tessdata to an absolute path so OCR no longer depends on
  the current working dir. Applies to both the tesserocr and pytesseract
  paths.
- build.py: copy a portable Tesseract (exe + DLLs) from TESSERACT_DIR
  (default C:\Program Files\Tesseract-OCR) into <release>/tesseract/. Our
  trained models in assets/tessdata are used via --tessdata-dir, so their
  tessdata is skipped. Warns (non-fatal) if Tesseract isn't present.
- ci.yml: choco install tesseract before the build so the bundle is
  reproducible on the runner; verify it landed in the release dir.
- test/conftest.py: apply the SSL cert-store workaround so pytest can be
  collected on Windows boxes with a corrupted cert store (no-op on CI).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -79,6 +79,15 @@ jobs:
           environment-file: environment-win11.yml
           use-only-tar-bz2: false
 
+      - name: Install Tesseract (bundled into the release for click-and-run OCR)
+        shell: powershell
+        run: |
+          $ErrorActionPreference = "Stop"
+          choco install tesseract --no-progress -y
+          if (-not (Test-Path "C:\Program Files\Tesseract-OCR\tesseract.exe")) {
+            throw "Tesseract install did not produce tesseract.exe"
+          }
+
       - name: Build exe
         shell: powershell
         env:
@@ -88,6 +97,15 @@ jobs:
           C:\Miniconda\condabin\conda.bat activate botty
           python build.py --conda_path C:\Miniconda
 
+      - name: Verify Tesseract was bundled
+        shell: powershell
+        run: |
+          $ErrorActionPreference = "Stop"
+          $BOTTY_DIR = Get-ChildItem -Directory -Name | Where-Object { $_ -match '^botty_v' } | Select-Object -First 1
+          $tess = Join-Path $BOTTY_DIR "tesseract\tesseract.exe"
+          if (-not (Test-Path $tess)) { throw "Tesseract was not bundled into $BOTTY_DIR" }
+          Write-Host "Bundled: $tess"
+
       - name: Launch smoke test (built executables)
         shell: powershell
         run: |