cicd: switch to cicd/image instead of docker hub

Depends on #143 (closed).

Current docker images are based upon docker hub's Debian images. This means docker hub can MITM the images and ruin security. Switch to cicd/image>'s images, these are bootstrapped from scratch using standard Debian tooling. The result is that the only trusted third party is Debian.