Use specific docker-builder tag with util-linux in template

The 'latest' tag may be stale and lack util-linux, which is required
for NFS flock support by cache-manager.sh.