fix: remove trivy from Docker build while assessing compromise impact

[dacoburn]

Summary

Changes

• Removing Trivy from the image until we confirm the impact of their compromise

Testing

---

Release checklist (skip for non-release PRs)

• socket_basics/version.py updated to new version
• pyproject.toml version: field updated to match
• action.yml image: ref updated to docker://ghcr.io/socketdev/socket-basics:<new-version> (auto-updated by publish-docker.yml after v2.0.0; manual update required only for the initial v2.0.0 release)
• CHANGELOG.md [Unreleased] section reviewed (note: this content is replaced by auto-generated release notes when the tag fires — see docs/releasing.md)

⚠️ After merging: run publish-docker.yml via workflow_dispatch with the new version
before creating the git tag. The image must exist in GHCR before the tag is pushed.
See docs/releasing.md for the full process.