[SayHelloGsx]

Summary

• Fix the container publishing failure in run 41066365072: Trivy reported 15 fixable HIGH/CRITICAL findings in the pinned .NET 10.0.11 runtime and Ubuntu packages.
• Pin the SDK to 10.0.403-noble and both web/migrator runtime targets to 10.0.13-noble using verified image digests, preserving the existing security gate.
• Document how to refresh the image pins.

Validation

• Verified replacement runtime versions and all flagged OS package versions after installing curl: .NET/ASP.NET Core 10.0.13, libbrotli1 1.1.0-2ubuntu0.1, and OpenSSL/libssl3t64 3.0.13-0ubuntu3.16.
• Verified SDK image availability and git diff --check.
• Full image build was blocked locally by NuGet package-feed download failures; Trivy rescanning was blocked by vulnerability-database registry/DNS access failures.