Add the fleet container-build workflow so latest main can be rolled out by digest instead of a workstation-built image.