Docker Hub dependency

[eliaslevy]

The new Cloud Build configs bring in a dependency to Docker Hub by using the ubuntu image in one of the steps. This contrasts with the previous GCB config that only depended on GCR and the bazel image. We should eliminate the supply chain risk introduced by Docker Hub by using one of the Ubuntu managed images for the steps that currently use ubuntu.