Push image to unstable registry as part of CI

[krancour]

This allows us to implement #50 as a separate job without having to rebuild the image.

It also sets us up to eventually add e2e or integration tests without rebuilding the image.