refactor: new docker image pattern (CM-1171)

[ulemons]

Summary

use new pattern for docker image

Type of change

• Bug fix
• New feature
• Refactor / cleanup
• Performance improvement
• Chore / dependency update
• Documentation

JIRA ticket

CM-1171

[cursor]

PR Summary

Low Risk
Build-only Dockerfile refactor with no application code changes; main risk is a broken or larger image if the new base or pnpm setup diverges from other workers.

Overview
Updates Dockerfile.automatic_onboarding_worker to match the newer service image pattern used elsewhere (e.g. other workers).

The builder stage moves from node:24-alpine to node:24-bookworm-slim, with native build deps installed via apt-get instead of apk. Dependency prefetch now copies package.json up front and uses corepack enable && corepack prepare --activate instead of globally installing Corepack and pinning pnpm@9.15.0.

The runner stage adds pnpm_config_verify_deps_before_run=false, copies package.json before Corepack setup, and uses the same Corepack activation approach (still on bookworm-slim with ca-certificates).

^{Reviewed by Cursor Bugbot for commit 9d14cdf. Bugbot is set up for automated code reviews on this repo. Configure here.}

[Copilot]

Pull request overview

Aligns the automatic onboarding worker image with the repository’s newer Docker build pattern.

Changes:

• Uses Debian slim for builder and runner stages.
• Sources pnpm via the root packageManager configuration.
• Adds runtime dependency-verification configuration.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.