Build refactoring

compose.yml

@@ -11,18 +11,18 @@ x-env-base: &env-base
 services:
   server:
     <<: *service-base
-    image: oven/bun:1.2.22
+    image: oven/bun:1.2.22@sha256:be10e30bef280c5673ce469979ce792bc8e983983198ca04da27f24b6aecc2d7
     volumes:
       - *volume-app
     working_dir: /app/packages/server
     env_file: .env
     environment:
       <<: *env-base
-    entrypoint: ["bun", "bun:dev"]
+    entrypoint: ["bun", "dev:bun"]
 
   cli:
     <<: *service-base
-    image: oven/bun:1.2.22
+    image: oven/bun:1.2.22@sha256:be10e30bef280c5673ce469979ce792bc8e983983198ca04da27f24b6aecc2d7
     volumes:
       - *volume-app
     working_dir: /app
@@ -35,7 +35,7 @@ services:
 
   webapp:
     <<: *service-base
-    image: node:22.19.0
+    image: node:22.19.0@sha256:f2bf1588ef7e8dd183d9e4cb4330a0d952204b7348ead42afb1aab11f9c4911b
     ports:
       - ${PORT:?PORT missing}:80
     volumes:
@@ -48,7 +48,7 @@ services:
 
   tempo:
     <<: *service-base
-    image: grafana/tempo:main-8d7feda
+    image: grafana/tempo:latest@sha256:a4361e69d7f260f0a465f92b090dc53f5b07b81151b10c1ca92fad9948dc258f
     command: [-config.file=/etc/tempo.yaml]
     volumes:
       - ./telemetry/tempo.yaml:/etc/tempo.yaml
@@ -56,7 +56,7 @@ services:
     stop_signal: SIGKILL
 
   prometheus:
-    image: prom/prometheus:v3.5.0
+    image: prom/prometheus:v3.5.0@sha256:8672a850efe2f9874702406c8318704edb363587f8c2ca88586b4c8fdb5cea24
     command:
       - --config.file=/etc/prometheus.yaml
       - --web.enable-remote-write-receiver
@@ -65,7 +65,7 @@ services:
       - ./telemetry/prometheus.yaml:/etc/prometheus.yaml
 
   grafana:
-    image: grafana/grafana:12.3.0-17782621999
+    image: grafana/grafana:latest@sha256:5749a0e982878aedaa2d320ed14d3bdce7a040a938f482258670009d419a597f
     volumes:
       - ./telemetry/grafana-datasources.yaml:/etc/grafana/provisioning/datasources/datasources.yaml
     environment: