Pin the versions of software that gets built in demo Dockerfiles

[bradlarsen]

In the demo Dockerfiles, for mupdf, qpdf, and pdfium, the code is pulled down from git and a pinned revision or tag is not used. This adds a source of variability; it may well save us debugging time in the future if we pin to particular revisions or tags.