Re-work all uses of envsubst into equivalent build arg-based solutions
and remove envsubst all together. This had the knock-on effect of a)
moving additional Python requirements specification out of files and
into the dynamic pipeline config and b) allowed us to unify the
installed dependencies between the Debian and alpine-based Python
images.