initial hemlock dockerfile

installs the main cli, nothing else as of yet