Move install and customization into scripts/image-build-*.sh with a single RUN layer for the main stage, preserving behavior and reducing Dockerfile noise.
