build(docker): harden apt package installs

[JSONbored]

Summary

• Add apt retry and timeout configuration before package installs.
• Rewrite inherited apt sources from http to https before update/install.

Why

• Package mirror stalls caused publish-time Docker builds to fail or hang in central fleet checks.

Validation

• aio-fleet validate --all
• aio-fleet cleanup-repo --all --verify
• aio-fleet trunk run --repo mem0-aio --repo-path ../mem0-aio --no-fix
• git diff --check