feat: update image hash based on dowloaded content

Author: mroz22

.github/workflows/build-tenv-test.yml

@@ -27,5 +27,7 @@ jobs:
           file: ./docker/Dockerfile-debian
           platforms: linux/amd64,linux/arm64
           push: true
+          build-args: |
+            CACHE_BUST=${{ github.run_id }}
           tags: |
             ghcr.io/${{ github.repository_owner }}/trezor-user-env:${{ github.sha }}

.github/workflows/build-tenv.yml

@@ -30,7 +30,8 @@ jobs:
           file: ./docker/Dockerfile-debian
           platforms: linux/amd64,linux/arm64
           push: true
-          # todo: using github.sha does not take into account downloaded binaries in Dockerfile.debian => sha stays same
+          build-args: |
+            CACHE_BUST=${{ github.run_id }}
           tags: |
             ghcr.io/${{ github.repository_owner }}/trezor-user-env:${{ github.sha }}
             ghcr.io/${{ github.repository_owner }}/trezor-user-env:latest

docker/Dockerfile-debian

@@ -49,6 +49,8 @@ RUN uv sync
 # Copy the rest of the files
 COPY ./ /trezor-user-env
 
+# Cache-bust downloads when inputs change
+ARG CACHE_BUST=1
 RUN ./src/binaries/firmware/bin/download.sh
 RUN ./src/binaries/trezord-go/bin/download.sh
 RUN ./src/binaries/node-bridge/download.sh