Pin specific Salt version on Debian

FreeBSD packages and fixes are still currently for 3006 LTS.
Debian is already pushing 3008.2.

As we install Salt packages from packages.broadcom.com/, we can pin
a specific version.

Ref T2329

Differential Revision: https://devcentral.nasqueron.org/D4113