Keep Qt container apt packages snapshot-consistent

ober

13eb05156b4e6ce633d31d298fedf60c9f0f4e74

diff --git a/Dockerfile.qt b/Dockerfile.qt
index cca343e..f74302e 100644
--- a/Dockerfile.qt
+++ b/Dockerfile.qt
@@ -25,11 +25,12 @@ ARG APT_SNAPSHOT=20260701T000000Z
 ENV DEBIAN_FRONTEND=noninteractive
 ENV PATH=/root/.cargo/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 
-RUN sed -Ei \
-      -e "s#https?://(archive|security)\\.ubuntu\\.com/ubuntu/?#http://snapshot.ubuntu.com/ubuntu/${APT_SNAPSHOT}/#g" \
-      -e "s#https?://ports\\.ubuntu\\.com/ubuntu-ports/?#http://snapshot.ubuntu.com/ubuntu/${APT_SNAPSHOT}/#g" \
+RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates && \
+    sed -Ei \
+      -e "s#https?://(archive|security)\\.ubuntu\\.com/ubuntu/?#https://snapshot.ubuntu.com/ubuntu/${APT_SNAPSHOT}/#g" \
+      -e "s#https?://ports\\.ubuntu\\.com/ubuntu-ports/?#https://snapshot.ubuntu.com/ubuntu/${APT_SNAPSHOT}/#g" \
       /etc/apt/sources.list.d/ubuntu.sources && \
-    apt-get update && apt-get install -y --no-install-recommends \
+    apt-get update && apt-get install -y --no-install-recommends --allow-downgrades \
     bash \
     ca-certificates \
     cmake \
@@ -40,9 +41,11 @@ RUN sed -Ei \
     gzip \
     libgl1-mesa-dev \
     libncurses-dev \
+    libssl3t64 \
     libssl-dev \
     libudev-dev \
     make \
+    openssl \
     patchelf \
     pkg-config \
     qt6-base-dev \