fix(deps): update build-tools for CVE remediation

[platex-rehor-bot]

Description

Update the build-tools (insights-frontend-builder-common) submodule from d5c88bf to 7aae40d to trigger an image rebuild that pulls the latest caddy-ubi base image.

All 11 fixable CVEs in RHCLOUD-50854 originate from Go dependencies in the Caddy runtime base image (quay.io/redhat-services-prod/hcm-eng-prod-tenant/caddy-ubi:latest), not from this application's source code. Rebuilding the container image pulls the latest Caddy binary with updated Go stdlib, x/crypto, and go-chi/chi/v5.

CVEs addressed (8 Critical & Important):

CVE	Severity	Component	Fixed In
CVE-2026-56854	CRITICAL	golang.org/x/crypto	0.55.0
CVE-2026-39821	IMPORTANT	stdlib	1.26.6
CVE-2026-56860	IMPORTANT	stdlib	1.26.6
CVE-2026-33818	IMPORTANT	stdlib	1.26.6
CVE-2026-56858	IMPORTANT	stdlib	1.26.6
CVE-2026-56859	IMPORTANT	stdlib	1.26.6
CVE-2026-56862	IMPORTANT	stdlib	1.26.6
CVE-2026-56853	IMPORTANT	stdlib	1.26.6

1 unfixable CVE: CVE-2026-40553 (gawk RPM) — no upstream fix available.

---

Anything reviewers should know?

• This is a submodule pointer update only — no application code changes
• The submodule update includes CI improvements (setup-uv v9→v10) and a legacy Dockerfile base image bump (fedora 45→46)
• The Go CVEs will be resolved when the rebuilt image pulls the latest caddy-ubi:latest with updated Go toolchain and dependencies
• If caddy-ubi:latest has not yet been updated by the Caddy team, some CVEs may persist after rebuild — a follow-up scan will confirm

---

Checklist

• Accessibility: color contrast, keyboard nav, screen reader tested (or N/A)
• All PR checks pass locally (build, lint, test)
• No unrelated changes included
• (Optional) QE: OUIA changed, test impact, no coverage
• (Optional) UX: end-user UX modified, designs need sign-off

AI disclosure

Assisted by: Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 5f823fb3-4b64-4e34-adae-71b1462910ae

---

_{Comment @coderabbitai help to get the list of available commands.}