CVE-2025-6965 libsqlite3-0 #231

Our CI Trivy scan fails on the CKAN Docker image due to a CRITICAL vulnerability in libsqlite3-0 (CVE-2025-6965). The image currently contains 3.40.1-2+deb12u1; Debian security provides a fixed version 3.40.1-2+deb12u2.

What broke
Trivy finds 1 critical OS vuln in the image and exits with code 1, failing the workflow.

`Running Trivy with options: trivy image ghcr.io/genomicdatainfrastructure/gdi-userportal-ckan-docker:sha-734100e
INFO Detected OS family="debian" version="12.10"
...
Total: 1 (CRITICAL: 1)

Library: libsqlite3-0
Vulnerability: CVE-2025-6965
Severity: CRITICAL
Status: fixed
Installed Version: 3.40.1-2+deb12u1
Fixed Version: 3.40.1-2+deb12u2`