Update the centos base image from centos 7 to centos 8. The latter is available in `vault.centos.org` repositories, so we can rebuild in the future. The resulting binaries require GLIBC 2.28. While at it, update to OpenSSL 3.6.0.