fix(ci): refresh frontend alpine packages

[ElwinLiu]

Summary

• Add a frontend image build arg that changes each publish run to refresh the Alpine package-upgrade layer
• Use that arg in the nginx Alpine stage so fixed OpenSSL packages are pulled instead of stale cached packages

Test plan

• git diff --check
• Publish Images should rebuild the frontend package refresh layer and rerun Trivy