chore: Remove vestigial ZAP + OpenJDK from Dockerfile.complete

ZAP was installed but never used by hybrid_analyzer.py. Removing ZAP
and openjdk-17-jre-headless reduces image size by ~700MB-1GB.
dast-mvp.dockerfile retains ZAP for DAST scanning.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: devatsecure

Dockerfile.complete

@@ -33,7 +33,6 @@ RUN GITLEAKS_VERSION="8.18.4" && \
 # Install unzip (required for Nuclei)
 RUN apt-get update && apt-get install -y --no-install-recommends \
     unzip \
-    openjdk-17-jre-headless \
     && rm -rf /var/lib/apt/lists/*
 
 # Install Nuclei (for DAST)
@@ -43,12 +42,6 @@ RUN wget -q https://github.com/projectdiscovery/nuclei/releases/download/v3.1.0/
     chmod +x /usr/local/bin/nuclei && \
     nuclei -update-templates || true
 
-# Install OWASP ZAP (for DAST)
-RUN wget -q https://github.com/zaproxy/zaproxy/releases/download/v2.14.0/ZAP_2.14.0_Linux.tar.gz -O /tmp/zap.tar.gz && \
-    tar -xzf /tmp/zap.tar.gz -C /opt && \
-    rm /tmp/zap.tar.gz && \
-    ln -s /opt/ZAP_2.14.0/zap.sh /usr/local/bin/zap.sh || true
-
 # Install OPA (for policy gates)
 RUN wget -q https://openpolicyagent.org/downloads/latest/opa_linux_amd64_static -O /usr/local/bin/opa && \
     chmod +x /usr/local/bin/opa