ci/github: run checks in a container

We need a container with a recent version of Ubuntu to run mypy in strict
mode on validate.py.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>