fix: use docker buildx imagetools in the retag stage instead of pulling, tagging and pushing