refactor: separate base image configuration into Dockerfile.base for improved build management

apps/edr-freight-api/Dockerfile

@@ -1,34 +1,12 @@
 # syntax=docker/dockerfile:1
 # Build from monorepo root: docker build -f apps/edr-freight-api/Dockerfile .
+#
+# The base image (Node + Alpine Chromium/Puppeteer + pnpm) is built and pushed
+# separately — see Dockerfile.base. Override the pinned tag at build time with
+#   --build-arg BASE_IMAGE=registry.license.aafda.gov.et/edr-public/freight-api-base:<tag>
+ARG BASE_IMAGE=registry.license.aafda.gov.et/edr-public/freight-api-base:node24-alpine
 
-FROM node:24.15.0-alpine AS base
-
-# Puppeteer ships a glibc Chrome that cannot run on Alpine; skip the ~150MB
-# download at install time. The runner stage installs Alpine's system Chromium.
-ENV PUPPETEER_SKIP_DOWNLOAD=true
-# Chromium + fonts for Puppeteer PDF rendering (contract/invoice/receipt docs).
-# Without these, Puppeteer fails to launch and the code degrades to an
-# unformatted plain-text PDF fallback. Use Alpine's system Chromium (musl-built);
-# the glibc Chrome that `puppeteer install` downloads cannot run on Alpine.
-RUN apk add --no-cache \
-    libc6-compat \
-    chromium \
-    nss \
-    freetype \
-    harfbuzz \
-    ca-certificates \
-    ttf-freefont \
-    font-noto-cjk
-ENV NODE_ENV=production
-# Point Puppeteer at the system Chromium and skip its bundled download.
-ENV PUPPETEER_SKIP_DOWNLOAD=true
-ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
-# Store pnpm's content-addressable store under PNPM_HOME so the BuildKit
-# `--mount=type=cache,target=/pnpm/store` cache actually persists deps across builds.
-ENV PNPM_HOME="/pnpm"
-ENV PATH="$PNPM_HOME:$PATH"
-RUN corepack enable
-WORKDIR /app
+FROM ${BASE_IMAGE} AS base
 
 FROM base AS pruner
 COPY . .