Backport: Use archive.debian.org for Debian 11 (5-63-stable)

Backport of !508 (merged) to 5-63-stable.

GitLab version: 19.2 (19-2-stable in omnibus-gitlab, currently pinned to builder 5.63.2)

• Drop the bullseye-security repo
• Use archive.debian.org
• Pin/downgrade packages that are no longer available in the archive
• Use Debian Bookworm for distribution_ci_tools and ruby_kaniko

Related backports:

• !513 (merged) (5-65-stable, GitLab 19.3)
• !515 (merged) (5-60-stable, GitLab 19.0 and 19.1)
• !516 (merged) (5-52-stable, GitLab 18.11)