Lock DNS-check image to a specific version

[Simon]

Continues #289

@bboreham brought up a good point:

I think this should use a specific version tag so we don’t get changes from an alpine upgrade in future.

There are args for and against locking a version but I'm +1 here.