Copilot AI linked an issue

that may be closed by this pull request

Closed

…hing in Dockerfile
The previous approach (npm install --prefix "$(npm root -g)/npm") was broken because
it reads npm's own private package.json (referencing @npmcli/docs which is not public).
Replace with a temp-directory overlay: install brace-expansion >=5.0.8 and tar >=7.5.22
into a fresh prefix with no package.json, then cp into npm's bundled node_modules.
Also add a push trigger to publish-safe-outputs-node.yml on the Dockerfile path so the
image rebuilds automatically when this change is merged to main.
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title [WIP] Update container image to address vulnerabilities Fix gh-aw-node brace-expansion patch: replace broken npm --prefix overlay with temp-dir copy (GHSA-mh99-v99m-4gvg)

Copilot AI review requested due to automatic review settings