CodeBuild local cache reuses stale base layer after package repository changed

Build time looks great, but the produced image quietly carries an older package baseline because local Docker layer cache survives a repository-side base image update.