Review PNPM and Cargo in Dockerfile

[MarkAckert]

PNPM and Cargo are installed in the container used by the license scanning workflow, but don't maintain configuration and are re-installed and configured in the workflow. It would be nice to understand where the disconnect is between container definition and runtime state in workflow and update the container so we don't have to re-install / re-config any pre-req components. One research path could be use of shell in the workflow - we may be expecting bash and actions uses sh