ci(gitlab): move environmental tagging to deploy job an run on target host

also, provide a stop job for the production environment; enable trivy container scanning for testing

Closes #250 (closed)