chore(docker): pin apk package versions in build images

[ehsanking]

Motivation

• Hadolint reported unpinned apk add packages in the build images; pinning versions improves reproducibility and supply-chain hygiene.

Description

• Replace unpinned apk add lines in Dockerfile and Dockerfile.prod with explicit constraints (e.g. openssl=3.*, libc6-compat=1.*, wget=1.*, su-exec=0.2-r*) while keeping the change minimal and compatible with Alpine patch updates.

Testing

• No automated CI tests were executed in this patch; I verified the modified lines with rg -n "apk add" and git diff, and recommend running npm run lint, npm run build, and building the images with docker build -f Dockerfile . and docker build -f Dockerfile.prod . to validate the changes.

---

Codex Task

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.