When building, tagging, and publishing Docker images, is the

publish

goal smart enough to know that if it is being asked to publish an image with

image_tags

that don't exist, that it should

package

first - does that degree of dependency tracking work in the Docker backend?

Yes, it packages everything required for publishing.