Bump to Python 3.8

This avoids an issue with cryptography requiring python3-dev (which is only available for python 3.8 on alpine) to install, and allows building the base image again.