Fix stable vs. unstable
- fixes the "stable" variant using the unstable base image due to wrong m4 condition
- removes the ICC image altogether
- uses debian packages for TBB instead of compiling from source
- allows unstable to fail in CI (as a soft way to eventual removal)