add -o, --out flag

so we can specify a per-release build that busts caches