Dockerfile: update to GDAL 3.9.1

[pjonsson]

Make the minimal change to mirror
the change from datacube-explorer's
update to GDAL 3.9.

---

📚 Documentation preview 📚: https://datacube-ows--1046.org.readthedocs.build/en/1046/

[pjonsson]

I'll debug+fix this after #1047 is merged.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 93.63%. Comparing base (6cd0687) to head (f07fece).
Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1046   +/-   ##
=======================================
  Coverage   93.63%   93.63%           
=======================================
  Files          43       43           
  Lines        6509     6509           
=======================================
  Hits         6095     6095           
  Misses        414      414           

[SpacemanPaul]

Is there a reason we need to pip --disable-pip-version-check all the time?

Can't we just && pip install --upgrade pip --break-system-packages && once up front?

[pjonsson]

The version check connects to some internet site, so not doing that check speeds up running pip.

From a security perspective, things like pip make it easier to get other software into a compromised container, so pip should be uninstalled at the end. And not upgrading pip ensures the uninstall will get everything and not leave some stray parts from one version.