[14] update ECR base image and upstream libs

[chrisbc]

closes #14
closes #9

attempt to resolve build issues by updating to latest ECR using python 3.13

• new ECR base image
• add gcc++ compiler to image
• temporarily using git ref for tohki-hazard-store lib to get python 3.13 support
• fixed some tests
• moved everything (tests, build, etc) to Python 3.13
• upgraded some dev dependencies (flake8, black, twine) to make them work with Python 3.13
• Docker: merged RUN steps and added tidying up to reduce docker image size from 2.83GB to 2.01GB. The base image that we pull in is only 0.76GB large, so there's potentially still a lot of room for improvement.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.62%. Comparing base (4518676) to head (5ca0e72).
⚠️ Report is 23 commits behind head on deploy-test.

Additional details and impacted files

@@             Coverage Diff              @@
##           deploy-test      #15   +/-   ##
============================================
  Coverage        90.62%   90.62%           
============================================
  Files               14       14           
  Lines              480      480           
  Branches            33       33           
============================================
  Hits               435      435           
  Misses              38       38           
  Partials             7        7           

Flag	Coverage Δ
unittests	90.62% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[chrisdicaprio]

probably worth doing the release cycle to get rid of git ref before merging

[voj]

Since OpenQuake only supports up to 3.12, there is now #16 which fixes the build by going to 3.12, not requiring THS or nzshm-model to be changed at all.

Preserving this here for @chrisbc but should probably be closed.

[chrisbc]

this was superceded by #16