Note: This ensures that we are using the latest stable base images possible and that they are tagged/pinned to images we have confidence in. Note: Not pinning in `tools/fleet-docker/Dockerfile` was a large oversight as it was the Dockerfile used in releases.