To help trigger rebuilds of downstream docker images when security, etc
updates are available include the apt list files used to build the
image.

The idea is to:
1) Allow a tool like renovate to trigger pinned sha updates in
Dockerfiles since the image will now always change
2) Fix what version of packages are used based on what package lists
files are present.

The package lists are pulled out to their own layer to avoid
re-uploading the base image whenever an unrelated package changes.