This largely undoes the compatibility logic in D4734 to make
gates pass.

Since blob, backup, and tunnelbroker have been updated, there's no reason to
use the legacy "special paths" docker-specific workflow

Blob, Backup, and Tunnelbroker gates pass