Gateway images

Hardened container images in the gateway category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.