Move all build environment images to Github Container Registry

When we add/change a build environment image (e.g. when we're adding support for a new distro), the image must currently be manually pushed to the Docker Hub. This requires authorization to Docker Hub. But we don't want the pipeline to have admin access to all images under fullstaq/.

We should migrate to Github Container Registry which allows authorization on a per-image basis.