rework "create" ci jobs

use pandoc images directly instead of calling docker