Add Dockerfile for trusted builds on index.docker.io