feat(renovate): use our containers if possible

This allows us to use the containers from `common-ci-tasks-images` for
packages we build those for.

Only match then in `.tool-versions` so the version from
`.tool-versions.build` in the `common-ci-tasks-images` are still
getting updates from upstream.