chore(deps): update python docker tag

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
python		minor	3.12.7 -> 3.13.0
python	final	minor	3.12-alpine -> 3.13-alpine
python	stage	minor	3.12.7-alpine3.20 -> 3.13.0-alpine3.20
python	final	minor	3.12.7-alpine3.20 -> 3.13.0-alpine3.20

---

Configuration

📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ API	spectral	1		0	1.58s
⚠️ BASH	bash-exec	6		1	0.02s
✅ BASH	shellcheck	6		0	0.22s
✅ BASH	shfmt	6	0	0	0.38s
✅ COPYPASTE	jscpd	yes		no	3.49s
✅ DOCKERFILE	hadolint	128		0	20.5s
✅ JSON	jsonlint	20		0	0.2s
✅ JSON	v8r	22		0	32.18s
⚠️ MARKDOWN	markdownlint	266	0	297	32.44s
✅ MARKDOWN	markdown-table-formatter	266	0	0	162.29s
⚠️ PYTHON	bandit	212		66	3.86s
✅ PYTHON	black	212	0	0	5.96s
✅ PYTHON	flake8	212		0	2.15s
✅ PYTHON	isort	212	0	0	1.18s
✅ PYTHON	mypy	212		0	21.21s
✅ PYTHON	pylint	212		0	33.62s
✅ PYTHON	ruff	212	0	0	0.5s
✅ REPOSITORY	checkov	yes		no	48.84s
✅ REPOSITORY	git_diff	yes		no	0.42s
⚠️ REPOSITORY	grype	yes		24	14.95s
✅ REPOSITORY	secretlint	yes		no	16.53s
❌ REPOSITORY	trivy	yes		1	65.54s
✅ REPOSITORY	trivy-sbom	yes		no	0.57s
⚠️ REPOSITORY	trufflehog	yes		1	7.6s
✅ SPELL	cspell	713		0	12.34s
⚠️ SPELL	lychee	348		9	5.66s
✅ XML	xmllint	3	0	0	0.37s
✅ YAML	prettier	160	0	0	4.96s
✅ YAML	v8r	102		0	194.54s
✅ YAML	yamllint	161		0	2.84s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by