fix(docker): Use distroless instead of scratch (#3111)

By changing our base to distroless/base, we make sure that our image has
the correct SSL/TLS root certificates.

Dockerfile

@@ -13,7 +13,7 @@ ENV VERSION=$version
 RUN go run scripts/release.go -docker
 
 # STEP 2: Build a tiny image
-FROM scratch
+FROM gcr.io/distroless/base-debian12
 
 COPY --from=builder /workspace/sqlc /workspace/sqlc
 ENTRYPOINT ["/workspace/sqlc"]