validate that our Galaxies never build images on the fly

[martenson]

@zsalvet mentioned that he saw UMSA resolver build an msconvert docker image -- this should never happen

We should review all instances' configuration and verify this is never the case.