Patch container CVEs: Next 14.2.35, Go 1.25 + pgx 5.10, alpine 3.22, npm stripped

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

frontend/Dockerfile

@@ -22,6 +22,9 @@ RUN npm run build
 FROM node:20-alpine AS runner
 WORKDIR /app
 
+RUN apk upgrade --no-cache
+RUN rm -rf /usr/local/lib/node_modules /usr/local/bin/npm /usr/local/bin/npx /usr/local/bin/corepack /opt/yarn* /pnpm
+
 ENV NODE_ENV=production
 ENV NEXT_TELEMETRY_DISABLED=1