Add hadolint to CI to catch Dockerfile mistakes and security issues

[EzraBrooks]

https://github.com/hadolint/hadolint is an excellent Dockerfile sanity checker.

[Bckempa]

Descoping from humble-2024.01.0 due to build system rework slated for upcoming release.

[mkhansenbot]

Added to next milestone (proposed) humble-2024.04.0

[ivanperez-keera]

This has been open for a while. Rather than having an issue permanently open, I want to move it to a discussion. We'll have the opportunity to discuss what static analysis mechanisms need to be added in each release, and open the appropriate tickets then.