Rebase IaC container on new base arch

Want to have all the new goodies I just added available.
Also add a pacman update layer to the container so it bumps base versions even if it's rebuilt on a stale base image.