Adapt build pipeline to tag latest image with latest tag

If I want an Unguard environment that is always up to date, I currently need to manually bump the version of the image every time, as there is no "latest" image.

Scope of this issue is to tag the latest main build image with `latest`.

If possible, also tag the latest versioned build (i.e. not a snapshot version) with the tag `stable`.