ci: Refactor ci-template setup

Instead of building the image on a schedule, use a user-incrementable tag and try to build the image on each pipeline.

If the image tag does not exist, a new one is built and pushed. If its already built the job is a no-op and the existing image is used.

backport of !1019 (merged)