fix: use libgl1 and pin to bookworm (libgl1-mesa-glx removed in trixie)

initial deploy