Test switching to hardend images

[sambles]

https://hub.docker.com/hardened-images/catalog

both internal / external images where possible

[sambles]

should also update python version and update package deps at the same time