chore(deps): pin dependencies (#35101)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[public.ecr.aws/docker/library/alpine](https://hub.docker.com/_/alpine)
([source](https://redirect.github.com/alpinelinux/docker-alpine)) |
stage | pinDigest | -> `a8560b3` |
| tccr.io/tccr/alpine | final | pinDigest |  -> `8ae22cc` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzguMCIsInVwZGF0ZWRJblZlciI6IjM5LjIzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciJdfQ==-->

containers/apps/db-wait-redis/Dockerfile

@@ -1,5 +1,5 @@
 # hadolint ignore=DL3007
-FROM tccr.io/tccr/alpine:latest
+FROM tccr.io/tccr/alpine:latest@sha256:8ae22cc7c6f2dbc803e2d7e8aff41496d72a3ec4c2527501baac5f94360ed20a
 
 ARG TARGETPLATFORM
 ARG VERSION

containers/apps/traefik/Dockerfile

@@ -1,7 +1,7 @@
 FROM public.ecr.aws/docker/library/traefik:v3.4.0@sha256:4cf907247939b5d20bf4eff73abd21cb413c339600dde76dbc94a874b2578a27
 # Above line used by CI to find tags etc
 
-FROM public.ecr.aws/docker/library/alpine:3.21.3 as plugins
+FROM public.ecr.aws/docker/library/alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c as plugins
 
 # FIXME: Find a way to keep versions up to date
 # -- Use the following prefixes to specify plugins to clone