Move back to ci-linux:production image after upgrade (#7207)

There are still a bunch of open questions on how to handle image
pinning; in the meantime, let's keep using the production tag.