feat: fat Docker image with all language runtimes (java, rust, pnpm, unzip, etc.)

Pre-install everything needed by SWE-forge tasks since Basilica
containers block apt-get at runtime (no_new_privs).

Author: echobt

Dockerfile

@@ -11,14 +11,17 @@ RUN cargo build --release && strip target/release/term-executor
 # ── Runtime stage ──
 FROM debian:bookworm-slim
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    ca-certificates git curl libssl3 \
+    ca-certificates git curl unzip libssl3 libssl-dev pkg-config \
     python3 python3-pip python3-venv \
     build-essential nodejs npm \
     golang-go \
+    default-jdk maven \
     && ln -sf /usr/bin/python3 /usr/bin/python \
     && npm install -g corepack yarn pnpm \
     && corepack enable \
+    && curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y \
     && rm -rf /var/lib/apt/lists/*
+ENV PATH="/root/.cargo/bin:${PATH}"
 COPY --from=builder /build/target/release/term-executor /usr/local/bin/
 RUN mkdir -p /tmp/sessions
 ENV IMAGE_NAME=platformnetwork/term-executor