dockerTools.buildLayeredImage: prepare to exclude some paths

Without changing behavior, since this code is fiddly, make it possible
to add a filtering step before packaging individual paths.