base-buster: Pin elasticsearch to avoid 7.10.0 with apt preferences

We chose to exclude the broken version by pinning 7.10.0 to -1 instead of
pinning the currently working 7.9.3 version to 1001. This will make sure we
don't forget to upgrade once the bugfix is published.

Related to T2791