bump-base-image

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The workflow explicitly pulls the external Docker base image nvcr.io/nvidia/pytorch:<YY.MM>-py3 at runtime (via docker/.ngc_version.dev and .gitlab/stages/01.build.yml), which is a required dependency and results in remotely fetched image layers that execute code during CI builds.