feat: use nginx chainguard image instead of alpine to fix vulnerabilities

[gibaros]

Chainguard is secured at 0 vulnerabilities, but makes it hard to debug. It is distroless, no shell, no env var loading at runtime.