ipabusedb-docker-reporter: pin docker CLI image, add make push, fix stale names

Pin the docker:cli source to 29.9.3 plus its manifest list digest, tag
the image as git.eeqj.de/sneak/ipabusedb-docker-reporter with the date
and latest, add a push target, and rename the remaining
ipabusedb-docker-ssh references in the README and package doc.

ipabusedb-docker-reporter/Dockerfile

@@ -12,14 +12,16 @@
 #     -e DOCKER_CONTAINER_NAME=sshd \
 #     -e IPABUSEDB_API_KEY=... \
 #     -e INTERVAL=1200 \
-#     ipabusedb-docker-reporter
+#     git.eeqj.de/sneak/ipabusedb-docker-reporter:latest
 
 FROM git.eeqj.de/sneak/baseimage:2026-11-05
 
 # The reporter shells out to "docker logs", so it needs the docker CLI.
 # The static binary from the official CLI image avoids pulling the whole
-# docker.io package (and daemon) in via apt.
-COPY --from=docker:cli /usr/local/bin/docker /usr/local/bin/docker
+# docker.io package (and daemon) in via apt. Pinned to a release tag plus
+# the multi-arch manifest list digest.
+COPY --from=docker:29.9.3-cli@sha256:2357639ad1ea7d0194134bf3292622fd4e562483966ed674e5d7c945b5f3b28d \
+    /usr/local/bin/docker /usr/local/bin/docker
 
 WORKDIR /src
 COPY go.mod go.sum ./