Backport: Use archive.debian.org for Debian 11 (5-60-stable)

Backport of !508 (merged) to 5-60-stable.

GitLab versions: 19.0 and 19.1. Both 19-0-stable (currently pinned to builder 5.60.2) and 19-1-stable (currently pinned to builder 5.60.3) in omnibus-gitlab use the 5-60-stable builder branch, so this single backport covers both releases.

• Drop the bullseye-security repo
• Use archive.debian.org
• Pin/downgrade packages that are no longer available in the archive
• Use Debian Bookworm for distribution_ci_tools and ruby_kaniko

Related backports:

• !513 (merged) (5-65-stable, GitLab 19.3)
• !514 (merged) (5-63-stable, GitLab 19.2)
• !516 (merged) (5-52-stable, GitLab 18.11)