CI: Use fully qualified base image name

[sosthene-nitrokey]

Podman doesn't use docker.io by default and prefers having the domain of the registry