tag docker images with Dockerfile sha because docker's cache sucks