Dockerfile template for future trusted builds