chore(docker): update pinned tool versions

Author: pRizz

packages/core/src/docker/Dockerfile

@@ -365,7 +365,7 @@ RUN set -eux; \
 
 # yq v4.50.1 (2025-12-14) - YAML processor
 # Disabled temporarily to reduce Docker build time.
-# RUN curl -sL https://github.com/mikefarah/yq/releases/download/v4.52.2/yq_linux_$(dpkg --print-architecture) -o /home/opencoder/.local/bin/yq \
+# RUN curl -sL https://github.com/mikefarah/yq/releases/download/v4.52.4/yq_linux_$(dpkg --print-architecture) -o /home/opencoder/.local/bin/yq \
 #     && chmod +x /home/opencoder/.local/bin/yq
 
 # Install direnv (2026-01-22)
@@ -471,7 +471,7 @@ USER opencoder
 # # cargo-audit 0.22.0 - security audit
 # # cargo-deny 0.19.0 - dependency linter
 # RUN . /home/opencoder/.cargo/env \
-#     && cargo install --locked cargo-nextest@0.9.126 cargo-audit@0.22.1 cargo-deny@0.19.0
+#     && cargo install --locked cargo-nextest@0.9.127 cargo-audit@0.22.1 cargo-deny@0.19.0
 #
 # # Install mold fast linker (2026-01-22)
 # USER root