k8s-latest: get hyperkube tags from gitlab registry

Also accept a template name/ID as a base, instead of passing a full template. That makes it easier to keep the k8s-latest template up to date with our most recent public template.