tools in all containers + apt GPG fix for 2026 clock + target dropdown fixed

- all 6 Dockerfiles: vim curl wget netcat git python3-pip now installed
- apt-insecure.conf (AllowInsecureRepositories) copied into images so
  participants can apt-get install despite expired Ubuntu/Debian GPG keys
- warmup base ubuntu:20.04 (EOL, GPG expired) -> ubuntu:24.04
- installed vim+git live into all 18 running team containers
- team portal target dropdown reloads after login (was empty pre-auth)
- attack log endpoint + A/D submit (attacker vs target) verified e2e

services/sheesh/Dockerfile

@@ -5,7 +5,10 @@ ENV DEBIAN_FRONTEND=noninteractive
 ENV HOME=/home/ctfuser
 WORKDIR /home/ctfuser/chall
 
-RUN apt-get update && apt-get install -y --no-install-recommends \
+# Allow apt on hosts whose clock is past GPG key expiry (2026+)
+COPY apt-insecure.conf /etc/apt/apt.conf.d/99gemastik-insecure
+
+RUN apt-get -o Acquire::AllowInsecureRepositories=true update && apt-get -y --allow-unauthenticated install --no-install-recommends \
     openssh-server \
     build-essential \
     libffi-dev \