Lock Linux to minimum supported version (Ubuntu 18.04 / RHEL 8, glibc 2.28).
Since this PR, CI runs VS Code tasks exact after built binaries and before `dist host`. This is to ensure that the vscode artifacts are available when undraft the releases.