build: switch base images to node:22-bookworm-slim, revert CI to kaniko
Debian images are usr-merged (/bin is a symlink), which sidesteps the kaniko "unlinkat //bin: invalid argument" inter-stage cleanup bug hit with alpine bases. glibc also plays nicer with sharp and long-running Node servers than musl.