Bump alpine&runc versions (#21142)

* [image-builder-bob] Bump buildkit alpine 3.22 -> 3.22.2

Co-authored-by: Ona <no-reply@ona.com>

* [ws-daemon] Bump runc binary from 1.2.6 -> 1.2.8

---------

Co-authored-by: Ona <no-reply@ona.com>

Author: geropl

components/image-builder-bob/leeway.Dockerfile

@@ -2,7 +2,7 @@
 # Licensed under the GNU Affero General Public License (AGPL).
 # See License.AGPL.txt in the project root for license information.
 
-FROM ghcr.io/gitpod-io/buildkit:v0.20.1-gitpod.3
+FROM ghcr.io/gitpod-io/buildkit:v0.20.1-gitpod.4
 
 USER root
 RUN apk --no-cache add sudo bash \

components/ws-daemon/leeway.Dockerfile

@@ -5,7 +5,7 @@
 FROM cgr.dev/chainguard/wolfi-base:latest@sha256:815b27b8a70713c70404e44a718eddd52ea6f4a2bfad5f56455b52cd2789a9b2 as dl
 WORKDIR /dl
 RUN apk add --no-cache curl file \
-  && curl -OsSL https://github.com/opencontainers/runc/releases/download/v1.2.6/runc.amd64 \
+  && curl -OsSL https://github.com/opencontainers/runc/releases/download/v1.2.8/runc.amd64 \
   && chmod +x runc.amd64 \
   && if ! file runc.amd64 | grep -iq "ELF 64-bit LSB pie executable"; then echo "runc.amd64 is not a binary file"; exit 1;fi