2.3.2

chore: UBI runtime bases on clean X.Y tags.

- ci-runtime-go: ubi9/ubi-micro:9.8 (was 9.7-1778461406)
- ci-runtime-node: ubi9/nodejs-22-minimal:9.8 (was :1)

Plus renovate.json package rule constraining UBI image tag matching
to /^[0-9]+\.[0-9]+$/, preventing drift back to date-stamped tags.

Same UBI under the hood; cleaner pin, less PR churn for consumers.