The build process is run entirely by Docker containers, for more
reliable reproducibility.

make targets for local builds can still be run for developement,
and the check/test targets are only used locally.

- Controller uses varnishapi Admin.Listen to listen for the admin
  connection from varnishd.
- varnishd is invoked with the -M option, to connect to the listen
  port.
- Controller also creates the Varnish secret file, using go crypto/rand.
- So VSM does not have to inspected for the management port and
  location of the secret file.
- The only dependency is varnishapi Admin package, which is limited
  to the CLI network protocol, and requires no native code.

- Consolidate RUN commands, so as to have fewer container layers.
- Explicitly specify the version for VMOD re2.