fix: use os-provided public suffix