fix(docker): upgrade Alpine OS packages to resolve openssl HIGH CVE

security-scanning (Trivy) failed the PR: libcrypto3/libssl3/openssl
3.5.7-r0 in the eclipse-temurin:21-jdk-alpine base image carry
CVE-2026-14456 (HIGH, OpenSSL DoS via unbounded memory growth in QUIC
server), fixed in 3.5.8-r0. apk upgrade before installing curl pulls
the patched packages - verified locally by building the image and
checking apk info -v.

Author: Filip-sz-informed

docker/Dockerfile

@@ -38,7 +38,7 @@ COPY --from=build /build/target/${JAR_NAME}.jar /app/app.jar
 
 RUN chown app:app /app/app.jar
 
-RUN apk add --no-cache curl
+RUN apk update && apk upgrade --no-cache && apk add --no-cache curl
 
 # Use non-root user from here on
 USER app:app