push image tagged latest after tests

This will enable other organizations (like one with letters E L F in) to know which is the most recently passing image.

(also introduces a test that will skip pushing if dockerhub creds are not provided -- useful for forks)