Refresh Docker dependencies

[fqjony]

Summary

• refresh Dockerfile package and tool versions used by the worker image

Dependency Upgrades

• Azure CLI: 2.84.0 -> 2.85.0
• pip: 25.3 -> 26.0.1
• yq: 4.52.4 -> 4.53.2
• Google Cloud SDK: 561.0.0 -> 565.0.0
• tzdata: 2025b-3ubuntu1.1 -> 2026a-0ubuntu0.25.10.1
• vim: 2:9.1.0967-1ubuntu6.1 -> 2:9.1.0967-1ubuntu6.2

Validation

• GitHub Actions CodeQL and Linter Analysis: passed
• GitHub Actions Docker Ops: currently blocked before build by Docker Hub auth in CI

[Copilot]

Pull request overview

Updates the Docker base image’s pinned tool/package versions and adjusts build steps to improve reproducibility and fix known build-layer issues (timezone setup, error handling during cleanup).

Changes:

• Bumped pinned runtime tool versions (Azure CLI, pip, yq, Google Cloud CLI).
• Refreshed Ubuntu package pins (notably tzdata) and switched vim package pin to vim-nox.
• Made timezone configuration idempotent and tightened failure behavior in the Azure CLI venv cleanup step.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.