CHORE(ci): Update Docker Base image
The image is referenced in that many places that it makes sense to put it into a variable, facilitating easier updates. I changed the level of the version pin from patch to minor. Patch level changes should always be safe to update to, according to semVer. Not pinning the patch version ensures that we use released fixes for the base wimage and therefore increases security.