fix(docker): narrow the Docker build context and keep the checkout credentials out of it

fix(docker): narrow the Docker build context and keep the checkout credentials out of it #3124