UID2-7411: upgrade Alpine packages in reverse-proxy image to remediate HIGH/CRITICAL vulns

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: BehnamMozafari

tools/reverse-proxy/Dockerfile

@@ -1,5 +1,8 @@
 FROM nginx:alpine
 
+# Upgrade base Alpine packages to latest security builds (openssl/libssl3/libcrypto3, musl, zlib, libxml2, libexpat, nghttp2)
+RUN apk upgrade --no-cache
+
 # Install wget for healthcheck, gettext for envsubst, and openssl for fallback cert generation
 RUN apk add --no-cache wget gettext openssl