fix(resec): resolve DL3003 hadolint warning using WORKDIR

[Copilot]

The # hadolint ignore=DL3003 directive was ineffective because a # FIXME comment between it and the RUN instruction broke hadolint's ignore matching.

Changes

• dockerfiles/resec/Dockerfile: Replace cd /go/resec with WORKDIR /go/resec; clone repo into . (current directory); remove now-redundant ignore and FIXME comments

# Before
# hadolint ignore=DL3003
# FIXME: `git checkout "tags/${VERSION}"`
RUN set -x \
  && git clone https://github.com/Aireuropa/resec \
  && cd /go/resec \
  && git checkout "tags/${VERSION}" \
  ...

# After
WORKDIR /go/resec

RUN set -x \
  && git clone https://github.com/Aireuropa/resec . \
  && git checkout "tags/${VERSION}" \
  ...

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull request overview

This PR migrates the resec service from Debian 12 (bookworm) to Debian 13 (trixie), updating both the Go builder and runtime base images. This is the first service in the repository to use debian:13-slim and golang:1.24-trixie, following the migration pattern established by thumbor and paperless-ngx for Python-based services.

Changes:

• Builder stage updated from golang:1.20-bookworm to golang:1.24-trixie with pinned digest
• Runtime stage updated from debian:12-slim to debian:13-slim with pinned digest
• ca-certificates package updated from bookworm version (20230311+deb12u1) to trixie version (20250419)
• Test file updated to reflect correct version string (v1.5.2) and new binary checksum from Go 1.24/trixie rebuild

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
dockerfiles/resec/Dockerfile	Updates builder from golang:1.20-bookworm to golang:1.24-trixie and runtime from debian:12-slim to debian:13-slim, with ca-certificates version updated to trixie standard
tests/resec.yaml	Fixes stale version string (v1.1.2 → v1.5.2) and updates SHA256 checksum for binary rebuilt with Go 1.24/trixie