Handle run cache mounts

[jaytmiller]

• Ensure Docker RUN cache mount directories are created before being used in the build for caching
• Ensure Docker RUN cache mounts for user caches remain user owned after the build; being used as a RUN cache results in the cache being a root-owned mount point until corrected. Cannot be corrected while mounted so a separate Dockerfile with no RUN caching is needed to restore directory ownership. Attempts to use uid/gid mount parameters failed.
• Simplify image ID handling and make IDs disjoint from other science-platform git repos; this prevents science-platform-images from overwriting custom AWS IDs needed to push to ECR.

[jaytmiller]

• Security scan failures are due to an unrelated vulnerability in the certifi package which should not block this PR.
• Code quality is passing.
• Image building failed for Roman but passed for Jwebbinar and TIKE. It's failing very early in the build process, during or immediately after the image pull of jupyter/docker-stacks... which did not fail for the other two different missions suggesting that the problem is not generic or related to these changes.