Automate build and release of boulder-tools image

[jsha]

Currently we build and release boulder-tools manually using test/boulder-tools/tag_and_upload.sh. But we should automate that process to ensure builds are always made reproducibly and from a clean state. That would also let us remove some push permissions on Docker Hub.