Scheduled automatic Docker image builds

Description

In order to make update-to-date base images always available, setup automatic builds looseley in-sync with parent base image builds.

Tags should match current formats:

<semantic-version> - mutable
[inherent image sha]

Acceptance criteria

• images are rebuilt from updated base images each week
• semantic release tag is updated to latest base image tag (i.e. a mutable tag)