ci: avoid passing Docker credential via arguments

This patch changes the docker login in the generated script. Instead of passing the registry credential as an argument, it now uses stdin and passes --password-stdin.

This addresses a marginal exposure risk.

Signed-off-by: William Woodruff william@trailofbits.com