Improve CI to publish containers to a private repo

[causten]

There's a push to have dockers come/go to a private repo for CI. Today github actions can build a docker image to be used for builds but that is published publicly. Goal is to build externally but push/pull to a private dockerhub repo using a dockerhub token via github secrets