Tweaks to policy
Base on a plain AlpineLinux image, split images

Use a separate 'base' docker image to avoid redownloading the jar
(ADD <uri> directives aren't cached by Docker apparently).
Refactor the scripts a bit