Upgrade to 1.0.0

Concerns: pushword/core, pushword/dev-app

Refresh the Docker base

New Docker builds pin FrankenPHP 1.12.7, rebuild its binary with patched Go dependencies and install current Debian security updates. Sites that already copied the Docker skeleton should merge Dockerfile, or rerun pw:docker:init --force only if their Docker files have not been customised.