fix(osx): use a per-image keychain password

The password can change from image to image, and since we now allow
running different images on the same worker we need to be able to
specify the password per image.