gitlab-ci: Capture the image-builder Docker digest

Get the image digest for the apertis-image-builder Docker image and always refer to it from jobs.

This ensures that the same image is used consistently across the whole pipeline, even if in the meantime the :latest tag in the image-builder Docker repository is updated.

Later, this could be specified externally when starting a pipeline to reproduce the build environment of a previous build.