read dockerhub image target from secrets or variables

we should consider configuring in the repository where the app production image gets pushed to.

its not something that needs or should be part of the code.
check for possible downsides though.