Consider more explicit versions in docker

[nuke-web3]

Presently we use latest of the rust base image & whatever the default is for sp1up - it could be we want to manually pin those down, as mismatches could be problematic. Alternatively we can use it as a signal that dep updates are likely needed on our Cargo.tomls