COPY vs ADD in pipeline, need to investigate and standardize

ADD is discouraged, and has some unexpected behavior.

Possibly can be enforced with Anchore.