Distroless grafana image

### Discussed in https://github.com/grafana/grafana/discussions/71727 <div type='discussions-op-text'> ^{Originally posted by **RichardoC** July 17, 2023} Currently our image scanning pipeline (using trivy) detects a high number of OS related vulnerabilities in the grafana images. To reduce this I'd like to suggest making a distroless grafana image so that the only vulnerabilities detected would be due to libraries in the binaries, rather than unused files from the base Alpine image. For example, the grafana/grafana:9.3.16 image which was released 25 days ago has the following vulnerability report. Moving to distroless should remove all the Alpine related vulns ``` $ trivy image grafana/grafana:9.3.16 2023-07-17T10:16:22.591+0100 INFO Vulnerability scanning is enabled 2023-07-17T10:16:22.591+0100 INFO Secret scanning is enabled 2023-07-17T10:16:22.591+0100 INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning 2023-07-17T10:16:22.591+0100 INFO Please see also https://aquasecurity.github.io/trivy/v0.41/docs/secret/scanning/#recommendation for faster secret detection 2023-07-17T10:16:25.862+0100 INFO Detected OS: alpine 2023-07-17T10:16:25.862+0100 INFO Detecting Alpine vulnerabilities... 2023-07-17T10:16:25.864+0100 INFO Number of language-specific files: 1 2023-07-17T10:16:25.864+0100 INFO Detecting gobinary vulnerabilities... grafana/grafana:9.3.16 (alpine 3.17.3) Total: 6 (UNKNOWN: 0, LOW: 2, MEDIUM: 2, HIGH: 2, CRITICAL: 0) ┌────────────┬───────────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐ │ Library │ Vulnerability │ Severity │ Installed Version │ Fixed Version │ Title │ ├────────────┼───────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤ │ libcrypto3 │ CVE-2023-2650 │ HIGH │ 3.0.8-r3 │ 3.0.9-r0 │ Possible D…