build: update base images, dependencies, and security patches for faster and safer builds

[l50]

Key Changes:

• Updated all Warpgate container templates to use immutable, pinned base image digests
• Added dev-deploy Rust profile for faster iterative builds with optimized defaults
• Upgraded major Rust, Python, and Ruby dependencies for security and performance
• Applied additional package and pip/gem upgrades to address recent CVEs in build and runtime

Added:

• Introduced [profile.dev-deploy] section in Cargo.toml for rapid Rust builds,
  enabling faster compile times and incremental builds suitable for development
• Task for upgrading pip to the latest version in Ansible base role to address
  CVEs and ensure the newest Python package installer is present
• Task to update vulnerable Ruby gem dependencies (net-imap, resolv, rexml,
  uri, zlib) in lateral movement tooling to mitigate recent vulnerabilities
• Task to upgrade pycryptodome in the Impacket virtual environment to fix
  CVE GHSA-j225-cvw7-qrx7 in credential access tools role

Changed:

• All container images in Warpgate templates now reference SHA256 digests for
  deterministic builds, improved reproducibility, and security
• Warpgate provisioners for blue agent templates now pin mcp-grafana download
  URLs to explicit version (v0.11.6) instead of latest for consistency
• Updated Ansible Molecule scenarios to use Ubuntu 24.04 images, ensuring
  compatibility with newer base systems
• Updated key Python dependencies (aiohttp, cryptography, requests) to
  secure minimum versions in the base role
• Bumped specific Python package versions (e.g., cryptography, pyopenssl)
  in coercion tools for improved security and compatibility
• Updated Rust dependencies in Cargo.lock to latest patch versions for
  aws-lc-rs, aws-lc-sys, bitflags, cc, hashbrown, hyper-rustls,
  indexmap, itertools, js-sys, libc, libredox, rand, redox_syscall,
  rustls, rustls-webpki, tokio, typenum, wasip2, wasm-bindgen*,
  webpki-root-certs, windows-sys, and related Windows target crates
• Cross build config (Cross.toml) now installs mold linker for faster
  linking, improving Rust build times in CI and local development
• Rust EC2 build Taskfile now supports fast profile switching, parallel jobs,
  and auto-stripping for deploys; prefers dev-deploy profile for development
• Refined build logic to use all available CPU cores by default for Rust
  compilation, improving speed for both local and remote builds
• Coercion tools now require minimum versions for cryptography and pyopenssl

Removed:

• No longer reference floating container tags (e.g., latest) in any build or
  deployment context—ensuring all images are immutable and auditable
• Eliminated redundant or obsolete comments in build scripts to clarify logic

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.06%. Comparing base (f337b6a) to head (ab54fda).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #225      +/-   ##
==========================================
+ Coverage   51.05%   51.06%   +0.01%     
==========================================
  Files         374      374              
  Lines       56688    56705      +17     
==========================================
+ Hits        28941    28958      +17     
  Misses      27747    27747              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.