LASB-2748: Resolve critical vulnerabilities reported by Snyk

[mtac50]

What

Link to story

• Updated dependabot configuration.
• Updated micrometer-registry-cloudwatch version
• Updated aws-xray-recorder-sdk-spring version.
• Updated org.apache.cxf:cxf-rt-features-logging version
• Updated spring-boot
• Updated gradle
• Updated the build and deploy pipelines so that the docker image tag using the commit hash.

Checklist

Before you ask people to review this PR:

• Tests should be passing: ./gradlew test
• Github should not be reporting conflicts; you should have recently run git rebase master.
• Avoid mixing whitespace changes with code changes in the same commit. These make diffs harder to read and conflicts more likely.
• You should have looked at the diff against master and ensured that nothing unexpected is included in your changes.
• You should have checked that the commit messages say why the change was made.

[Ross-Nation]

I think everything looks good to my eyes, I couldn't see any glaringly obvious issues and I think I'm getting a better understanding of how the pipelines hook up :)