Tag Docker images built from Git tags as 'latest'

This is safe as long as:
* Pushed version tags are monotonic (reasonable for the foreseable
  future)
* Version tag builds are not re-run from the web-UI