Fix container build and lock the Nsjail version

The android-build container was failing to build (today) because it
pulls in the tip of Nsjail's master branch. This change locks the
version to a known good release and allows it to be easily updated
when future releases are tested and working.

Testing: python dockerfile_test.py
Bug: 119673464
Change-Id: I60b0c5440ef35b742a8a4b03672e1d600b776452