[T014] Refresh Pinned Base Image Tools #20

Update the explicitly pinned GraalVM, Hugo, VHS, and Tea installations in the base devcontainer image to their current compatible releases while preserving the existing Java, operating-system, Node.js, and Helm major-version contracts.

Task ID: T014
Canonical task: docs/tasks/T014_refresh_pinned_base_image_tools.md

The task file is the source of truth for scope, acceptance criteria, status, and verification.