Sanitize CI_BUILD_REF_NAME before tagging

Git branch names allow characters which would be invalid when assigned to a Docker tag. Use tr to replace other than valid characters with a dash -.

Eg. branch feature/new-stuff would become tag feature-new-stuff-

List of valid tag characters is based on this: https://docs.docker.com/engine/reference/commandline/tag/