Dockerfile: replace filesystem/ intermediate step with build.sh

It will allows us to use trusted build while still not polluting the image with build dependencies.