GH-5608: Update Docker images to JDK 21/25

[Ostrzyciel]

GitHub issue resolved: #5608

Briefly describe the changes proposed in this PR:

• Upgrade the JDK in Tomcat-based images to 25
• Upgrade the JDK in Jetty-based images to 21
  • Unfortunately, there are no official Jetty 9 Docker images for JDKs newer than 21. Jetty 9 itself is end-of-life and will very soon stop getting security updates, so this is the best we can do at the moment.
  • See: Upgrade Jetty 9 to 10/11/12 #4252 (comment)

The images appear to work fine. On Tomcat, we are getting a warning message like this:

WARNING: A restricted method in java.lang.System has been called
WARNING: java.lang.System::load has been called by org.apache.tomcat.jni.Library in an unnamed module (file:/usr/local/tomcat/lib/tomcat-jni.jar)
WARNING: Use --enable-native-access=ALL-UNNAMED to avoid a warning for callers in this module
WARNING: Restricted methods will be blocked in a future release unless native access is enabled

But that's only mildly annoying. We can disable this with a proper option if needed.

---

PR Author Checklist (see the contributor guidelines for more details):

• my pull request is self-contained
• I've added tests for the changes I made
• I've applied code formatting (you can use mvn process-resources to format from the command line)
• I've squashed my commits where necessary
• every commit message starts with the issue number (GH-xxxx) followed by a meaningful description of the change

[hmottestad]

Can you target this at the develop branch?

[Ostrzyciel]

Can you target this at the develop branch?

Sure thing, done!