Bandit container image.

[lukehinds]

Following on from the discussion in #1086 , we could generate are own official bandit images for use in CI / CD. I expect the best way to achieve this is using a build / publish action in github actions. Makes sense to use the sigstore project so images can be signed / validated too.