[ci] CI image Dockerfile needs to be paramatarized on FROM registry

[chwarr]

Some internal Microsoft systems want to be able to control the container registry used when building the Bond CI image. The Dockerfile needs to be parameterized, and the build that produces these images will need to set this new parameter to a suitable value.