Backport: Use archive.debian.org for Debian 11 (5-52-stable)

Backport of !508 (merged) to 5-52-stable.

GitLab version: 18.11 (18-11-stable in omnibus-gitlab, currently pinned to builder 5.52.1)

• Drop the bullseye-security repo
• Use archive.debian.org
• Pin/downgrade packages that are no longer available in the archive
• Use Debian Bookworm for distribution_ci_tools and ruby_kaniko

Related backports:

• !513 (merged) (5-65-stable, GitLab 19.3)
• !514 (merged) (5-63-stable, GitLab 19.2)
• !515 (merged) (5-60-stable, GitLab 19.0 and 19.1)