[Ganciodocker] Reparto de trabajos

[fadelkon]

Meskio abrió esta issue hace unas semanas
https://framagit.org/les/gancio/-/issues/104

> sign releases
> 
> The current way of getting gancio is or from npm registry or from framagit. In one case we put the trust in any of those hosting providers. I will prefer to be able to verify directly that the source code I download is being produced by the gancio team.

Lesion está firmando los tags ahora:

> I signed a new tag just to test (v1.0.0-dev) but it is not shown in the UI as signed commits are, this is a gitlab issue (https://gitlab.com/gitlab-org/gitlab/-/issues/19260) (but at least you can verify tags by your own from cli using git tag -v

Y los otros:

https://framagit.org/les/gancio/-/tags

Así que en vez de hacer "yarn install gancio" podríamos descargar el código verificable de framagit, verificarlo, y después hacer " yarn install .  " o como se haga para construir el proyecto.

A ver si le saco un rato mañana.

Salut!
fdk