Add a build trigger that updates CDC stable images

[hqpho]

• Since this only depends on website repo, it doesn't need to live in the deployment repo (and it would add complexity to have to update a version file and have it live there)
• I've factored out commit label construction into a shared helper too
• Note that the website portion of the stable image's commits label will be a merge commit that only exists on the stable branch.