use hash for base container image, not tag

[amorton]

Current docker file has

FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:1.24

(and Dockerfile-profiling.jvm is similar)

Update to use the hash rather than tag to follow best practice