docker: multi-stage builds (intermediate) anthony explains #503