make sure we are not pulling in :latest but rather the specific tag passed to porter

[kurktchiev]

This probably ties in with #41 but currently during install you can pass in the specific SHA we are to use and deploy with porter however that SHA is not passed down to backstage and crossplane.