🔒️(agents) uninstall pip from the agents image

Reduce surface area and keep the runtime image minimal.

src/agents/Dockerfile

@@ -19,6 +19,9 @@ FROM base AS production
 
 WORKDIR /app
 
+# Remove pip to reduce attack surface in production
+RUN pip uninstall -y pip
+
 ARG DOCKER_USER
 USER ${DOCKER_USER}