use hash for base container image, not tag

Current docker file has 


```
FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:1.24
```

(and `Dockerfile-profiling.jvm` is similar) 

Update to use the hash rather than tag to follow best practice
