Dockerfile: split CI parts to separate Dockerfile / stage

[thaJeztah]

#35100 rewrote the Dockerfile to use multi-stage builds. The content of the Dockerfile still contains various parts that are only used in CI, but not for building or developing. We should split those parts to separate build-stages and/or Dockerfiles, to keep the final image clean of things that are not needed.