Fix Docker Hub rate limiting by configuring buildx to use registry mirror

The docker-container driver for buildx spawns an independent BuildKit
container that doesn't inherit registry-mirrors from daemon.json.
This adds --config /etc/buildkitd.toml which points BuildKit at the
local mirror.docker.syncad.com pull-through cache.