Base image bumps

This groups together !205 (closed) !206 (closed) !209 (closed) and !223 (closed) to allow a single base image build. The first build failed due to cryptography now requiring Rust; Python has therefore been bumped to 3.8 (closes #113 (closed)).

The test and lint CI jobs have also been updated, because they were failing and blocking the builds.