build(docker): add python 3.11 and development tools

Add system development tools and Python 3.11 runtime to the Docker
image. This includes git-lfs, curl, jq, ripgrep, and other utilities commonly needed in development workflows. Also installs Python 3.11 with pip and sets up proper symlinks, while fixing home directory ownership for the non-root user.

Author: tmeckel

Dockerfile

@@ -11,12 +11,35 @@ RUN sed -i "/^[^:]*:x:${GID}:/d" /etc/group \
     && sed -i "/^[^:]*:x:${UID}:/d" /etc/passwd \
     && echo "${USERNAME}:x:${UID}:${GID}::/home/${USERNAME}:/sbin/nologin" >> /etc/passwd \
     && echo "${USERNAME}:x:${GID}:" >> /etc/group \
-    && mkdir -p /home/${USERNAME}
+    && mkdir -p /home/${USERNAME} \
+    && chown -R ${USERNAME}:${USERNAME} /home/${USERNAME}
 
 # hadolint ignore=DL3008
 RUN apt-get update && apt-get install -y --no-install-recommends \
     ca-certificates \
     git \
+    git-lfs \
+    curl \
+    gnupg \
+    jq \
+    ripgrep \
+    tzdata \
+    wget \
+    unzip \
+    zip \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Python 3.11 and pip in a dedicated layer
+# hadolint ignore=DL3008
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    python3.11 \
+    python3.11-venv \
+    python3.11-distutils \
+    python3-pip \
+    ffmpeg \
+    && update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.11 1 || true \
+    && ln -sf /usr/bin/pip3 /usr/bin/pip || true \
+    && ln -sf /usr/bin/python3.11 /usr/bin/python || true \
     && rm -rf /var/lib/apt/lists/*
 
 RUN npm install -g "@google/gemini-cli@${GEMINI_CLI_VERSION}"