Bump service images and update Tempo config

Update Woodpecker, Gitea, Herald, and observability stack
images to latest versions. Migrate Tempo config to v3
schema with live_store and backend_scheduler/worker.
Add Docker socket mount and sandbox iteration limit to
Herald, and switch its model and entrypoint.

tempo/tempo.yml

@@ -8,10 +8,16 @@ distributor:
                 http:
                     endpoint: 0.0.0.0:4318
 
-ingester:
+live_store:
     max_block_duration: 5m
 
-compactor:
+backend_scheduler:
+    provider:
+        compaction:
+            compaction:
+                block_retention: 48h
+
+backend_worker:
     compaction:
         block_retention: 48h
 
@@ -21,4 +27,4 @@ storage:
         local:
             path: /var/tempo/traces
         wal:
-            path: /var/tempo/wal
+            path: /var/tempo/wal