PROXY_TAG is being used as the tag for the docker image and also as the sha of the istio/proxy to use as base for building the docker proxy image in this repo. This dual is wrong and confusing,