Investigate pinning Android SDK components inside CI #59778

We already had at least two different CI issues caused by the Android SDK's sdkmanager:

• Fix Android CI failing to download SDKs #57857: a new license was added and sdkmanager failed to accept it with the old command
• arm-android docker image is broken after a rebuild #59757: the emulator was updated to a broken (at least for us) version, causing all builds to fail

The root cause of those issues is that sdkmanager doesn't support any kind of pinning (as far as I can tell), and any change Google makes can break our CI.

Should we develop a pinning mechanism and use it for all the Android SDK components?

cc @rust-lang/infra