first hit at a sandbox dockerfile

This is an answer to https://github.com/spree/spree/pull/4859. Discussion encouraged, especially what we need to add to produce sample images.