Upgrade pyasn1 to 0.6.3 in base image

The base ansible-operator:v1.38.1 image contains pyasn1 0.6.1, which is
vulnerable to CVE-2026-30922.

This change adds a pip3 upgrade step to install pyasn1>=0.6.3 which
includes the MAX_NESTING_DEPTH protection against this attack.

Closes-Bug: OSPRH-27893

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: vkmc

build/Dockerfile

@@ -12,6 +12,9 @@ RUN bash -c -- 'if [ "${NO_PROXY:-__ZZZZZ}" == "__ZZZZZ" ]; then echo "Applying
 # -- cleans up the cached data from dnf to keep the image as small as possible
 RUN dnf update -y --exclude=ansible* && dnf install -y python3-passlib python3-bcrypt && dnf clean all && rm -rf /var/cache/dnf
 
+# upgrade pyasn1 to fix CVE-2026-30922 (DoS vulnerability via unbounded recursion)
+RUN pip3 install --upgrade 'pyasn1>=0.6.3'
+
 COPY requirements.yml ${HOME}/requirements.yml
 RUN ansible-galaxy collection install -r ${HOME}/requirements.yml \
  && chmod -R ug+rwx ${HOME}/.ansible