CLDYCON-7961: release 2.14.16 - bump Alpine to 3.24.2 to fix curl/openssl CVEs

[Hudong-hub]

What does this PR do?

Ships metrics-agent 2.14.16, a security patch that bumps the base image from alpine:3.24.1 to alpine:3.24.2 to remediate new curl and openssl CVEs reported against 2.14.15. This advances curl 8.21.0-r0 -> 8.22.0-r0 and openssl 3.5.7-r0 -> 3.5.8-r0. Version bumped in version/version.go, Chart.yaml, and values.yaml.

Where should the reviewer start?

deploy/docker/Dockerfile and version/version.go

How should this be manually tested?

On merge to master the Deploy workflow builds and pushes metrics-agent:2.14.16 + latest. Re-scan the built image and confirm curl 8.22.0-r0 / openssl 3.5.8-r0 and that the reported CVEs clear.

Any background context you want to provide?

Follow-on to CLDYCON-7960 (Apple). 2.14.15's Alpine 3.24.1 ships the vulnerable curl/openssl; 3.24.2 carries the patched revisions. Same fix pattern as the prior patch (#340, 2.14.14 -> 2.14.15). Note the vulnerable packages are not on the agent's runtime path (Go binary, CGO disabled, no curl invocation); this patch clears the image scan for PCI compliance.

What picture best describes this PR (optional but encouraged)?

N/A

What are the relevant Github Issues?

CLDYCON-7961, CLDYCON-7960

Developer Done List

• Tests Added/Updated
• Updated README.md
• Verified backward compatible
• Verified database migrations will not be catastrophic
• Considered Security, Availability and Confidentiality

For the Reviewer:

By approving this PR, the reviewer acknowledges that they have checked all items in this done list.

Reviewer/Approval Done List

• Tests Pass Locally
• CI Build Passes
• Verified README.md is updated
• Verified changes are backward compatible
• Reviewed impact to Security, Availability and Confidentiality (if issue found, add comments and request changes)

[hunterwei-ibm]

It is suggested to add "--no-cache" switch to apk add curl as apk add --no-cache curl to force always install the latest remote version in the apk repo.

[Hudong-hub]

updated