build: pin docker images on sha256 hash
Issue: #32
This will prevent supply chain attacks where the underlying docker image tag is overwritten.
Issue: #32
This will prevent supply chain attacks where the underlying docker image tag is overwritten.