Fix dockerfile / build so dependabot PRs work!

[phillmv]

It's been a few months since I looked at this but something about how I've set up the dockerfile? prevents dependbot PRs from being mergeable. I vaguely recall that… maybe I cache the Gemfile? or something? in the code folder, and so the image isn't rebuilt from scratch.