fix(docker): add curl to builder stage for utoipa-swagger-ui download

[Rushit]

Problem

The Publish Docker Image workflow was failing during cargo build --release with:

failed to download Swagger UI: Custom { kind: NotFound, error: "`curl` command not found" }

Root Cause

utoipa-swagger-ui v9.0.2 downloads the Swagger UI zip from GitHub at compile time in its build.rs. It tries two methods:

1. Rust reqwest feature → not enabled (Err(NotPresent))
2. Falls back to the system curl binary → not present in the builder image

curl was only installed in the runtime (debian:bookworm-slim) stage, not in the builder (rust:1.90-slim) stage.

Fix

Added curl to the builder stage apt-get install.

References

Failing run: https://github.com/zvectorlabs/zradar/actions/runs/28687661442

[gemini-code-assist]

Code Review

This pull request adds curl to the list of packages installed in the Dockerfile. The reviewer suggests using the vendored feature of utoipa-swagger-ui in Cargo.toml instead of installing curl to download Swagger UI assets at compile time, which would eliminate compile-time network requests and remove the dependency on curl in the builder stage.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

Instead of installing curl in the builder stage to download Swagger UI assets at compile time, consider enabling the vendored feature of utoipa-swagger-ui in your Cargo.toml (for example: utoipa-swagger-ui = { version = "9", features = ["axum", "vendored"] }). This embeds the Swagger UI assets directly, which eliminates compile-time network requests to GitHub, removes the dependency on curl in the builder stage, and enables offline/air-gapped builds.