ci: Move (most) deb9 jobs to deb10

deb9 is now end-of-life so we are dropping support for producing bindists.

Ben: It seems that the EOL for the LTS is actually - 2022-06-30 - so perhaps we don't want to drop support quite yet? What is the policy here?

cc @bgamari