ci: prebuild the fedora toolchain as a container image

.dockerignore

@@ -0,0 +1,4 @@
+# The image is a toolchain only -- the dockerfile COPYs nothing, and the
+# scripts arrive via actions/checkout at run time. Keep the build context empty.
+*
+!dockerfile