Label multistage build sources so they can be deleted on destroy

In cases where docker image prune or --filter=since would have minor adverse effects on other projects, so it can even be run in local environments

src/_base/docker/image/php-fpm/Dockerfile.twig

@@ -1,5 +1,6 @@
 {% if @('app.build') == 'static' %}
 FROM {{ @('docker.repository') ~ ':' ~ @('app.version') }}-console as console
+LABEL build="{{ @('workspace.name') ~ ':' ~ @('app.version') }}"
 RUN if [ -d /app/tools/assets/ ]; then rm -rf /app/tools/assets/; fi
 RUN if [ -d {{ @('frontend.path') }}/node_modules/ ]; then rm -rf {{ @('frontend.path') }}/node_modules/; fi
 {% endif %}

src/_base/harness/config/cleanup.yml

@@ -14,7 +14,9 @@ function('built_images', [services]): |
 command('cleanup built-images'):
   env:
     IMAGES: = built_images(docker_service_images())
+    BUILD_LABEL: = @('workspace.name') ~ ':' ~ @('app.version')
   exec: |
     #!bash
     IMAGES=($IMAGES)
-    docker image rm --force -- "${IMAGES[@]}"
+    run docker image rm --force -- "${IMAGES[@]}"
+    run "docker images filter=label=build=$(printf '%q' "$BUILD_LABEL") -q | xargs docker image rm --force"