Also push Docker images to per-branch tags, or latest for the main branch

At the moment, latest is stuck at some ancient commit as it’s never being pushed to. This change preserves the per-commit tags, adding latest/$branch.