cli/Dockerfile hard-codes `latest` tag for its gcr.io/runconduit/cli-bin base image (`gcr.io/runconduit/cli-bin:latest`)

```docker
FROM gcr.io/runconduit/cli-bin:latest as build
```

The tag shouldn't be `latest`; it should be whatever tag we used for building cli-bin.