Related to swh/devel/swh-web#4746

This should fix the current "upload to pypi" build step.

Refs. swh/infra/sysadm-environment#4870

Do not use tox provided by debian and install it from pip to get
its latest version.

Related to #4959

Link to download kafka 3.3.1 is now a 404.

REGISTRY argument is overriden by a Makefile command as it is used in other
dockerfiles in this repository. This dockerfile did not use a REGISTRY argument
until previous commit so rename it to SWH_REGISTRY to prevent errors when
rebuilding images.

This is using the new swh container gitlab registry and install such binary.
This demonstrates how to use that new container while allowing dev on the svn
loader (using that new binary) to happen.

This is required in order for swh tests that use nix binaries being able
to locate them.

No recent mirrors present that kafka version so...

Related to T4615#92999

Following the documentation [1].

[1] https://cassandra.apache.org/doc/latest/cassandra/getting_started/installing.html#installing-the-debian-packages

Related to T4615

I forgot the other url instance to change.

Related to T4615

That should unstuck the current failing build [1].

[1] https://jenkins.softwareheritage.org/job/jenkins-tools/job/swh-jenkins-dockerfiles/1136/console

Related to T4615

It should fix docker image builds as the following error was reported:

Failed to fetch http://www.apache.org/dist/cassandra/debian/dists/40x/InRelease
Could not connect to downloads.apache.org:443 (88.99.95.219), connection timed out

The new swh directory loader will check recursive nar checksum
for downloaded tarball content using the nix-store command if
it is available in execution environment.

nodejs 12.x reached EOL so it is time to upgrade it.

Also explicitely install nodejs.

Related to T4259

Related to T3838

It is required to communicate info back to Phabricator when building
documentation after a diff has been submitted.

Related to T3661

Related to T3407

The Let's Encrypt ISRG root has expired, and only recent versions of apt
support validating through the alternative chain. As the base image
we're building from is not up to date, we need to upgrade apt and dpkg
before running apt update on https sources.

This should allow diff [1] to build.

[1] D5988

Related to T2845

Related to T3484