[tammy-baylis-swi]

This PR updates Lambda and k8s workflows to ensure they're built with up-to-date operating system CA cert packages, and the latest Python pip, requests, and certifi.

I'm also updating the local dev containers (docker-compose run (x86_64|aarch64)) to support using organization-approved CA if required. ⚠️ This is breaking for anyone currently doing local dev work; you'll need to cp Dockerfile.manylinux.example.

See ticket for detailed explanation.

[Copilot]

🟡 Changes recommended

The new Dockerfile example lacks the required license header, causing the pull request’s license-header check to fail.

1 open issue

• Add required license header to Dockerfile example · New

What changed in this PR

This PR refreshes certificate packages in Lambda and Kubernetes build environments and adds configurable organization CA support for local development containers.

Changes:

• Add OS CA certificate refreshes and pip upgrades to build steps.
• Build local manylinux containers from a customizable Dockerfile.
• Document local CA configuration and ignore the customized Dockerfile.

File	Description
Makefile	Refresh CA certificates and upgrade pip for Lambda builds.
image/​Dockerfile-beta	Add CA certificate refreshes and pip upgrades to beta image builds.
image/​Dockerfile	Add CA certificate refreshes and pip upgrades to production image builds.
Dockerfile.manylinux.example	Provide a template for organization CA installation and trust configuration.
docker-compose.yml	Build both local architectures using the customized manylinux Dockerfile.
CONTRIBUTING.md	Explain Dockerfile setup, CA configuration, and image rebuilding.
.gitignore	Exclude the locally customized Dockerfile.

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

Build dependency resolution and the changed certificate setup need validation before automated approval is safe.

No open issues 🎉

1 resolved since last review

• Add required license header to Dockerfile example

_{Review effort: Balanced}