Build the Windows trampolines in a fully pinned docker container that allows auditing the compilation in CI.
konsti