Dockerfile builds work with workspace limits

Dockerfile builds now declare the resources needed by their setup step, fixing a failure that prevented them from starting in workspaces with resource limits. When a build is refused, the failure is reported promptly instead of leaving the project marked as building.