build(role): update construct image

[donbeave]

Related pull requests

• https://github.com/ChainArgos/jackin-agent-brown/pull/104
• build(role): update construct image #79
• build(role): update construct image jackin-sentinel#18
• build(role): update construct image jackin-the-architect#156
• https://github.com/scentbird/jackin-agent-jones/pull/25

Summary

This updates the role Dockerfile base image to the latest published construct release, projectjackin/construct:0.15-trixie@sha256:33e4409db18809069dd4591a80a0d7f4dd93cf2b52b1a0ce9b86334042100e5b, so role builds consume the construct image published from current jackin main.

What ships

• Role builds now start from construct 0.15-trixie, pinned by the current multi-platform digest.
• The Dockerfile keeps the digest-pinned construct contract required by role validation.

Behavior changes

• Rebuilt role images inherit the latest construct base image instead of 0.14-trixie.

What this addresses

• Keeps this role aligned with the latest published jackin construct image.
• Completes the coordinated role update after centralizing role publish metadata in jackin-role and pinning workflows to the latest role action.

Verify locally

Checkout

gh pr checkout <PR_NUMBER>

Static checks

git diff --check
/Users/donbeave/Projects/jackin-project/codex-prs/jackin-label-contract/target/debug/jackin-role validate .
prek run --all-files

Migration notes

None.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud