fix(controller): use build image for publishing releases

A release == build + config, not release + config. This change forces the builder to explicitly push a build tag, then tells the controller to use the last known build image, rather than tagging it as a release and bumping config on top of `latest`.