build: push image in CI and retag instead of rebuilding

[bmarinov]

Image is being built twice: in the CI workflow, build job, and then in the release workflow again.

Workflows:

• CI build should tag and push with commit hash.
• Release workflow: pull image:sha, tag with version, push versioned/latest tags.

[bmarinov]

Resolved in #131