Update base image in Dockerfile to nonroot version

[mathieu-benoit]

Update base image in Dockerfile to nonroot version

We are also fixing the pinned version, stuck from Jan 2025 because was not done properly since then: #231, that's why we see these changes too:

♾️ | base-files | 12.4+deb12u8 | 12.4+deb12u12
➕ | media-types |   | 10.0.0
♾️ | tzdata | 2024b-0+deb12u1 | 2025b-0+deb12u2

[github-actions]

Overview

Image reference	score-compose:latest	score-compose:latest
- digest	ce6fe9df8293	f9907f52de23
- tag	latest	latest
- provenance	6f8022a	1b284c2
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	6.3 MB	6.3 MB (+35 kB)
- packages	53	54 (+1)

Policies (1 improved, 0 worsened)

Policy Name	score-compose:latest	score-compose:latest	Change	Standing
Default non-root user	⚠️	✅	-1	Improved
No AGPL v3 licenses	✅	✅		No Change
No fixable critical or high vulnerabilities	✅	✅		No Change
No high-profile vulnerabilities	✅	✅		No Change
No outdated base images	✅	✅		No Change
No unapproved base images	✅	✅		No Change
Supply chain attestations	✅	✅		No Change

Packages and Vulnerabilities (3 package changes and 0 vulnerability changes)

• ➕ 1 packages added
• ♾️ 2 packages changed
• 50 packages unchanged

Changes for packages of type deb (3 changes)

	Package	Version score-compose:latest	Version score-compose:latest
♾️	base-files	12.4+deb12u8	12.4+deb12u12
➕	media-types		10.0.0
♾️	tzdata	2024b-0+deb12u1	2025b-0+deb12u2