fix: restore Docker package builds

[3alpha]

Docker package builds fail when installing wget because Bullseye's security repository returns 404s. Move configuration downloads to a Bookworm builder and collect the shell, grep, and their libraries in a separate Bullseye stage without APT. This preserves compatibility with the existing upstream Prysm runtime images.

Validation:

• Hoodi amd64 package build and remote upload passed with npx dappnode/dappnodesdk build --provider remote --variant hoodi --arch amd64.
• Both service images built for amd64 and arm64.
• Both entrypoints passed smoke tests on native arm64.
• LUKSO configuration/genesis and Sepolia genesis downloads passed.
• git diff --check passed.

[tropibot]

✅ TropiBot report: SYNC TEST REPORT - PASSED

This CI runs on a real DAppNode using the same RPC calls a user would make to configure a staker setup: execution client, consensus client, web3signer, MEV-boost, and relays.

📦 Package Under Test

• IPFS Hash: QmVZoUtueMjt1Eu41X7YAcKDabD9dhC3vjwgA85dJgfSXp
• Install on DAppNode

📦 Clients Used

Component	DNP Name
Execution	hoodi-nethermind.dnp.dappnode.eth
Consensus	prysm-hoodi.dnp.dappnode.eth
Web3Signer	web3signer-hoodi.dnp.dappnode.eth
MEV Boost	mev-boost-hoodi.dnp.dappnode.eth
Network	hoodi

🔖 Version Tracking

Client	Before	After
Execution	Nethermind/v2.0.0+bec830cd-hp/linux-x64/dotnet10.0.11	Nethermind/v2.0.0+bec830cd-hp/linux-x64/dotnet10.0.11
Consensus	Prysm/v7.1.8-51b5a75 (linux amd64)	Prysm/v7.1.8-51b5a75 (linux amd64)

⏱️ Timing

Operation	Duration	Status
SetStakerConfig	53.1s	✅
PackageInstall	10.5s	✅
WaitForSync	3m 6s	✅

Total Duration: 4m 20s

---

📋 View full CI logs