[WM] write out docker creds when env var set & no ~/.dockercfg
[WM] only push the image when $CI is "true"

CI env var is set by Buildbox automatically.