refactor(agent-images): use explicit Debian base

bot_bottle/contrib/codex/Dockerfile

@@ -1,9 +1,9 @@
 # bot-bottle Codex provider image.
 #
-# Mirrors the default Claude image shape: Node LTS, git/network tooling,
-# non-root node user, and the provider CLI installed for that user.
+# Mirrors the default Claude image shape: Debian stable, git/network tooling,
+# a non-root runtime user, and the provider CLI installed for that user.
 
-FROM node:22-trixie-slim
+FROM debian:trixie-slim
 
 RUN apt-get update \
   && apt-get install -y --no-install-recommends \
@@ -16,8 +16,11 @@ RUN apt-get update \
   ripgrep \
   && rm -rf /var/lib/apt/lists/*
 
-# App-specific deps. Python isn't required by codex itself
-# (codex is a Node CLI), but is convenient for the agent to shell
+RUN groupadd --gid 1000 node \
+  && useradd --uid 1000 --gid node --shell /bin/bash --create-home node
+
+# App-specific deps. Python isn't required by Codex itself, but is convenient
+# for the agent to shell
 # out to for ad-hoc scripts. Kept on its own layer so it can be
 # moved to a downstream image if the base ever needs to shrink.
 RUN apt-get update \
@@ -32,8 +35,8 @@ WORKDIR /home/node
 ENV PATH="/home/node/.local/bin:${PATH}"
 
 # Remote-control support requires the standalone Codex install layout
-# under ~/.codex/packages/standalone/current. The npm package can run
-# the TUI, but remote-control commands expect this installer-owned path.
+# under ~/.codex/packages/standalone/current. Remote-control commands expect
+# this installer-owned path.
 RUN mkdir -p /home/node/.codex \
   && curl -fsSL https://chatgpt.com/codex/install.sh | sh