feat: install environment and push to buildcache with Makefile

This separates the installation step from the Dockerfile, allowing for extracting this into a separate repo or external phase.