Backport: Use archive.debian.org for Debian 11 (5-65-stable)

Backport of !508 (merged) to 5-65-stable.

GitLab version: 19.3 (19-3-stable in omnibus-gitlab, currently pinned to builder 5.65.1)

• Drop the bullseye-security repo
• Use archive.debian.org
• Pin/downgrade packages that are no longer available in the archive
• Use Debian Bookworm for distribution_ci_tools and ruby_kaniko

Related backports:

• !514 (merged) (5-63-stable, GitLab 19.2)
• !515 (merged) (5-60-stable, GitLab 19.0 and 19.1)
• !516 (merged) (5-52-stable, GitLab 18.11)