Pin versions in Dockerfile for releases

Our current Dockerfile refers to several software packages without any version constraints, both for our own software (e.g., c302, Sibernetic) and for distro packages (e.g., git, g++). To keep older versions maintainable it would be better to explicitly declare, or "pin", the versions for these packages when making a release so those earlier versions could be more reliably rebuilt from the Dockerfile.

The current Dockerfile or something like it should be maintained for active development so that we can integrate the latest versions of all components without needing to check all packages for upgrades one-by-one. Since integration of active development artifacts would be reflected in this un-pinned Docker image, there should be a mostly automated means of extracting all the versions of installed packages for the release Dockerfile.

Start by reviewing the current Dockerfile and inventorying the unpinned OpenWorm and distro packages it installs. Define how an active-development image can remain unpinned while a release Dockerfile captures exact versions, then identify a mostly automated way to extract those versions. Done means older releases can be rebuilt reliably from their pinned Dockerfile.