feat: digest-pin Node 22, harden compose, attest provenance + SBOM#20

heznpc merged 1 commit intomainstarter-series/docker-deploy-starter:mainfrom

chore/digest-pin-node22starter-series/docker-deploy-starter:chore/digest-pin-node22Copy head branch name to clipboard