Move back to ci-linux:production image after upgrade (#14105)

There are still a bunch of open questions on how to handle image
pinning; in the meantime, let's keep using the production tag.