Kaniko vs Buildah head-to-head: daemonless and rootless image builds, Dockerfile vs scripted control, Kubernetes/CI fit, …