ci: replace wildcard S3 endpoints with strict docker-images-prod buckets for security

Author: snowdream

.github/workflows/docker.yml

@@ -210,8 +210,8 @@ jobs:
             quay.io:443
             *.dkr.ecr.*.amazonaws.com:443
             *.azurecr.io:443
-            *.s3.amazonaws.com:443
-            *.s3.*.amazonaws.com:443
+            docker-images-prod.s3.us-west-2.amazonaws.com:443
+            docker-images-prod.s3.us-east-1.amazonaws.com:443
             osv-vulnerabilities.storage.googleapis.com:443
             api.osv.dev:443
             get.trivy.dev:443