Update libexpat and tiff to fix cves

Author: bjee19

build/Dockerfile.nginx

@@ -5,6 +5,11 @@ FROM scratch AS nginx-files
 ADD --link --chown=101:1001 https://cs.nginx.com/static/keys/nginx_signing.rsa.pub nginx_signing.rsa.pub
 
 FROM nginx:1.29.1-alpine-otel
+# the following apk update and add are to address CVE-2025-59375 and CVE-2025-8961 respectively,
+# once a new base image is available with these package updates, they can be removed
+RUN apk update && apk add --no-cache \
+    'libexpat=2.7.2-r0' \
+    'tiff=4.7.1-r0'
 
 # renovate: datasource=github-tags depName=nginx/agent
 ARG NGINX_AGENT_VERSION=v3.3.2