[sidey79]

Summary

• Switch the `base` stage (and thereby `runtime`) from `python:3.13.15` to `python:3.13.15-slim-trixie` (digest pinned).
• Builder stages keep the full image (compilers, Rust, -dev packages).
• `curl` is already installed via apt, so nothing else changes.
• README generation reads the first `FROM` (builder-base) and is unaffected.

Test plan

• CI image build succeeds for all platforms
• Integration tests pass
• Check modules with native dependencies for missing system libraries at runtime

🤖 Generated with Claude Code

https://claude.ai/code/session_01PZcTJ7VJ4i8vRUmZkWDaBv