Sinker got ssl security updates that requires libssl.so.3 which debian
bullseye doesn't have. Update to bookworm image.

Updates the sinker dockerfile following what iox does for a runtime
image with libssl3 libraries, also create sinker user and group
on the container.

docker buildx imagetools inspect <image> will show the overall
manifest sha unlike docker hub which only shows shas for specific
platforms.