Fix stable vs. unstable

• fixes the "stable" variant using the unstable base image due to wrong m4 condition
• removes the ICC image altogether
• uses debian packages for TBB instead of compiling from source
• allows unstable to fail in CI (as a soft way to eventual removal)