gitlab-ci: use mypy from Debian/bullseye to prevent random breakage

mypy 0.901 was released and everything broke:
https://gitlab.com/linsui/fdroidserver/-/jobs/1330206567

My point is to reduce the number of false job fails like this one. We
have a lot of checkers running, I really think they need to prove they are
adding value before we invest any time maintaining them. mypy is still
"wait and see" in terms of the adding any value.

!951

.gitlab-ci.yml

@@ -202,9 +202,16 @@ lint_format_safety_bandit_checks:
 
 
 lint_mypy:
-  image: python:3.9-buster
+  image: debian:bullseye
+  <<: *apt-template
   script:
-    - pip install mypy
+    - sed -i '/pyjks/d' setup.py  # TODO get from backports once available
+    # use Debian packages to avoid building C/rust sources
+    - apt-get install
+          mypy
+          python3-cryptography
+          python3-pip
+          python3-wheel
     - pip install -e .[test]
     # exclude vendored file
     - mypy --exclude fdroidserver/apksigcopier.py