chore: Require approval for major 'docker' updates

[thompson-tomo]

Fixes # (issue)

Changes

This adds an approval gate before upgrading to a new major version of a docker image.

For significant contributions please make sure you have completed the following items:

• CHANGELOG.md updated for non-trivial changes
• Unit tests have been added
• Changes in public API reviewed

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.51%. Comparing base (ef84abc) to head (893db97).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4598      +/-   ##
==========================================
- Coverage   86.52%   86.51%   -0.00%     
==========================================
  Files         525      525              
  Lines       20464    20464              
==========================================
- Hits        17704    17702       -2     
- Misses       2760     2762       +2     

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.