TPA-RFC-87: establish container lifecycle plans
While working on retire bullseye images (#19 - closed), it became apparent that we might not want to follow our normal Debian upgrade procedure for container retirement, and perhaps keep container images longer.