Put a list of the commit hashes for each included package somewhere into the final Docker image

• Look in the CI config
• The final image needs to contain these git hashes