updatecli could be used to keep core's ATH docker images up to date automatically, similar like in https://github.com/jenkins-infra/docker-packaging/blob/main/updatecli/updatecli.d/jenkins-agent-version.yml

All it needs to do is checking the docker hub for new tags and update the athRevision and athImage in the essentials.yml file: https://github.com/jenkinsci/jenkins/blob/master/essentials.yml