chore(oci/pin dependencies): pin dependencies

[tinfoild]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
debian	final	pinDigest	-> 3528682
docker.io/joplin/server (source)	stage	pinDigest	-> b87564e
docker.io/library/alpine	stage	pinDigest	-> b89d9c9
docker.io/library/debian	stage	pinDigest	-> 3528682
docker.io/library/golang	stage	pinDigest	-> 3efef61
docker.io/library/node	stage	pinDigest	-> 9bef0ef
docker.io/library/python	final	pinDigest	-> 53d6284
gcr.io/distroless/cc-debian12	final	pinDigest	-> 6970a2b
ghcr.io/astral-sh/uv	stage	pinDigest	-> 5ad2072
public.ecr.aws/docker/library/alpine (source)	final	pinDigest	-> c5b1261
public.ecr.aws/docker/library/alpine (source)	stage	pinDigest	-> 51b6726
public.ecr.aws/docker/library/alpine (source)	final	pinDigest	-> de4fe70
public.ecr.aws/docker/library/debian	final	pinDigest	-> 2bc5c23

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.