fix: switch Alpine sg_only Dockerfiles to bookworm for OpenHands compat

OpenHands install script uses apt-get which doesn't exist on Alpine.
Switch golang:1.23-alpine -> golang:1.23-bookworm for 2 design tasks:
- envoy-routeconfig-dep-chain-001
- k8s-typemeta-dep-chain-001

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: sjarmak

benchmarks/csb_sdlc_design/envoy-routeconfig-dep-chain-001/environment/Dockerfile.sg_only

@@ -2,16 +2,17 @@
 # Empty workspace — agent uses Sourcegraph MCP for code access.
 # Verifier clones mirror(s) at verification time via clone manifest.
 
-FROM golang:1.23-alpine
+FROM golang:1.23-bookworm
 
 ENV SOURCEGRAPH_REPOS=sg-evals/istio--4c1f845d,sg-evals/go-control-plane--71637ad6,sg-evals/data-plane-api--84e84367
 
 ENV DEBIAN_FRONTEND=noninteractive
-RUN apk add --no-cache \
+RUN apt-get update && apt-get install -y --no-install-recommends \
     git \
     python3 \
     curl \
-    bash
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /workspace
 

benchmarks/csb_sdlc_design/k8s-typemeta-dep-chain-001/environment/Dockerfile.sg_only

@@ -2,16 +2,17 @@
 # Empty workspace — agent uses Sourcegraph MCP for code access.
 # Verifier clones mirror(s) at verification time via clone manifest.
 
-FROM golang:1.23-alpine
+FROM golang:1.23-bookworm
 
 ENV SOURCEGRAPH_REPOS=sg-evals/kubernetes--31bf3ed4,sg-evals/api--f32ed1d6,sg-evals/apimachinery--b2e9f88f
 
 ENV DEBIAN_FRONTEND=noninteractive
-RUN apk add --no-cache \
+RUN apt-get update && apt-get install -y --no-install-recommends \
     git \
     python3 \
     curl \
-    bash
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /workspace