Pin lab versions in latest, testing, and future images

The lab version is currently set as `main` in the latest, testing, and future images.

It should be pinned to a specific version, so that images being rebuilt produce a predictable build with a predictable set of features.

If lab is broken on main temporarily, we won't end up with a broken lab in some images of quickstart.