chore(dockerfile): improve package installation and add Python dependencies

Dockerfile

@@ -94,8 +94,8 @@ ENV NODE_ENV=production \
 # syscalls; a hardened pod (all capabilities dropped, RuntimeDefault seccomp)
 # usually cannot create one, which is why DSH then falls back to Landlock and,
 # when that is unavailable too, to DSH_PERMISSION_MODE=danger-full-access.
-RUN apt-get update \
- && apt-get install -y --no-install-recommends \
+RUN apt update \
+ && apt install -y --no-install-recommends \
       ca-certificates \
       git \
       ripgrep \
@@ -106,8 +106,11 @@ RUN apt-get update \
       tini \
       gh \
       bubblewrap \
+      python3 \
+      python3-pip \
+      python3-venv \ 
  && rm -rf /var/lib/apt/lists/* \
- && curl -LsSf https://astral.sh/uv/install.sh | sh \
+ && apt autoclean -y \
      && install -d -o node -g node -m 0755 /workspace "$DSH_HOME" \
      && corepack enable \
      && corepack prepare "pnpm@$PNPM_VERSION" --activate \