fix(security): refresh .NET 10 runtime container image

[cdcavell]

Summary

Updates the pinned ASP.NET Core .NET 10 runtime container image after the
2.6.1 release container vulnerability gate detected a HIGH-severity runtime
vulnerability.

The release workflow correctly blocked container publication because the
previously pinned ASP.NET runtime image contained
Microsoft.NETCore.App.Runtime.linux-x64 10.0.10, which is affected by
CVE-2026-62901.

Changes

• Refresh the pinned mcr.microsoft.com/dotnet/aspnet:10.0 image digest.
• Move the final runtime image to the patched .NET 10.0.11 servicing image.
• Preserve immutable digest pinning for the production runtime stage.
• Preserve the existing .NET 10 image family and container build structure.

Security Impact

The updated runtime image addresses CVE-2026-62901, which caused the
release-triggered Trivy vulnerability threshold check to fail for the
2.6.1 container publication.

No application code, public API, template option, configuration surface,
generated scaffold structure, or application behavior is intentionally
changed.

Validation

• Existing PR CI and security checks.
• Release container image rebuild.
• Trivy HIGH/CRITICAL vulnerability threshold enforcement.