feat: migrate image to distroless

[Demonsthere]

Related issue(s)

Checklist

• I have read the contributing guidelines.
• I have referenced an issue containing the design document if my change
  introduces a new feature.
• I am following the
  contributing code guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security vulnerability, I
  confirm that I got the approval (please contact
  security@ory.sh) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

Further Comments

• Downgrade alpine image to 3.17 due to failing package upgrade
• Migrate to debian builder and distroless:base image to avoid CVE issues in base containers. We cannot migrate to static as hydra is build with dynamic linking.

[codecov]

Codecov Report

Merging #3539 (10e3c7d) into master (4b4c033) will not change coverage.
The diff coverage is n/a.

❗ Current head 10e3c7d differs from pull request most recent head fd77bf9. Consider uploading reports for the commit fd77bf9 to get more accurate results

@@           Coverage Diff           @@
##           master    #3539   +/-   ##
=======================================
  Coverage   76.62%   76.62%           
=======================================
  Files         129      129           
  Lines        9630     9630           
=======================================
  Hits         7379     7379           
  Misses       1749     1749           
  Partials      502      502           

[zepatrik]

If it works with sqlite 👍

addressed

[aeneasr]

This needs changes in ory/xgoreleaser first