This allows one to specify a custom keyserver image, making it more convenient for my case of testing keyserver images. Also moved where we specify the image to locals in aws_ecs as the image isn't keyserver primary specific and is shared also with keyserver secondary
Depends on D12862