Provide docker as a first-class service

Currently in order to build docker images we have to either use docker:dind or var/run/docker.sock. Generally it is suboptimal and unsecure. We should figure out a solutions to make it easier to use and also increase the possiblity of caching.