feat: require fixed docker version for reproducibility

This adds a specific version of docker to the dind container to ensure reproducible builds, and to allow upgrades which are now prevented by the fixed run command.

The latest stable docker version used here, 20.10.17, does not include the patch at https://github.com/moby/moby/commit/9f6b562dd12ef7b1f9e2f8e6f2ab6477790a6594, which addresses the clone3 issue that causes builds to fail. Therefore we have to patch this by hand after install. Actually it seems this was backported into the 20.10 series and is in 20.10.17 after all, https://github.com/moby/moby/commit/567c01f6d157cf6c1f39d68e9ca62e76d7834558. So, this may actually fix the clone issue in https://eicweb.phy.anl.gov/containers/eic_container/-/jobs/876520.