37e0aac971
Pulls the prod image up to the same toolset as the dev image (kubectl, kubeseal, uv/uvx, forgejo CLIs, nano, vim) without diverging the upstream root Dockerfile. Both build-dev.yml and build-prod.yml now share the same fork-overlay Dockerfile; only the image tag and trigger branch differ.