chore(deps): update docker.io/library/alpine docker tag to v3.18.2

See merge request !671

this fix is probably necvessary, because some pods fail during the
migration to 1.5.0

This patch enables read-only filesystems on the mastodon-web container
and disables privilege escalation