Pinning gives us longer stability. We implicitly had that as we were
still pulling from dockerhub which was deprecated.

The change to kas 2.3.3 brings the renaming to kas-container and removes
the need to specify "--isar".

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>