📌 Scorecard Pinned-Dependencies fix (#204, #206)

- FROM node:22-alpine AS build
+ FROM node:22-alpine@sha256:9385cd9f3001dfc3431e8ead12c43e9e1f87cc1b9b5c6cfd0f73865d405b27c4 AS build

- FROM node:22-alpine
+ FROM node:22-alpine@sha256:9385cd9f3001dfc3431e8ead12c43e9e1f87cc1b9b5c6cfd0f73865d405b27c4

Digest = multi-arch manifest list (amd64 + arm64). Refresh: docker buildx imagetools inspect node:22-alpine. Renovate/Dependabot bump it from here.