fix: pin .NET SDK and runtime digests in nethermind Dockerfile

The nethermind Dockerfile used floating tags (dotnet/sdk:10.0-noble and
dotnet/aspnet:10.0-noble) which broke when Microsoft pushed a new SDK
image. Pin both to the exact digests that Nethermind 1.36.2 uses
upstream, matching their own Dockerfile at that tag.

- SDK: 10.0.101-noble@sha256:d1823fe...
- Runtime: aspnet:10.0.1-noble@sha256:eaa7920...

Author: mw2000

nethermind/Dockerfile

@@ -13,7 +13,7 @@ RUN . /tmp/versions.env && git clone $OP_NODE_REPO --branch $OP_NODE_TAG --singl
 RUN . /tmp/versions.env && cd op-node && \
     just VERSION=$OP_NODE_TAG op-node
 
-FROM mcr.microsoft.com/dotnet/sdk:10.0-noble AS build
+FROM mcr.microsoft.com/dotnet/sdk:10.0.101-noble@sha256:d1823fecac3689a2eb959e02ee3bfe1c2142392808240039097ad70644566190 AS build
 
 ARG BUILD_CONFIG=release
 ARG TARGETARCH
@@ -31,7 +31,7 @@ RUN TARGETARCH=${TARGETARCH#linux/} && \
     echo "Using architecture: $arch" && \
     dotnet publish src/Nethermind/Nethermind.Runner -c $BUILD_CONFIG -a $arch -o /publish --sc false
 
-FROM mcr.microsoft.com/dotnet/aspnet:10.0-noble
+FROM mcr.microsoft.com/dotnet/aspnet:10.0.1-noble@sha256:eaa79205c3ade4792a7f7bf310a3aac51fe0e1d91c44e40f70b7c6423d475fe0
 
 RUN apt-get update && \
     apt-get install -y jq curl supervisor && \