Context and scope
Currently every merge to the master branch results in a docker image build tagged with the latest floating tag. Offline consensus suggests it would be preferable to instead only tag latest for release tags so that the latest tag always represents the most recent release image.

Since the bootstrap monitor currently depends on the latest tag pointing to an image built from the most recent commit to master, it will need to be updated to point to the master tag instead. The update to the bootstrap monitor must be merged and deployed in advance of any change to how the latest tag is applied.

Discussion and alternatives
As per #4469, there was discussion of renaming latest to latest-stable and adding a new latest-unstable tag. That renaming can be pursued separately.

Open questions
N/A