Use chainguard base image

Istio now uses chainguard as its base image and includes dependencies such as iptables from chainguard apk repo. In order for some containers to function correctly, we need to ensure dependencies are aligned and switching to chainguard will help maintain closer parity with upstream istio.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information