Fix gateway update manifest signing This hotfix corrects the gateway release pipeline so signed update metadata contains the OCI image digest only, instead of the full docker buildx imagetools inspect output. This restores trusted in-app gateway updates for installations upgrading from 2.2.x or earlier 2.3.x releases.