ref(Dockerfile): mash some layers together

also adds `--no-install-recommends` so we only install these packages and none of the recommendations, slimming down the installation.